Oct 2 20:05:19.243487 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:05:19.243536 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.243552 kernel: BIOS-provided physical RAM map: Oct 2 20:05:19.243564 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 20:05:19.243575 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 20:05:19.243585 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 20:05:19.243602 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 20:05:19.243614 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 20:05:19.243625 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 20:05:19.243636 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 20:05:19.243647 kernel: NX (Execute Disable) protection: active Oct 2 20:05:19.243659 kernel: SMBIOS 2.7 present. Oct 2 20:05:19.243670 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 20:05:19.243682 kernel: Hypervisor detected: KVM Oct 2 20:05:19.243699 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 20:05:19.243711 kernel: kvm-clock: cpu 0, msr 18f8a001, primary cpu clock Oct 2 20:05:19.243724 kernel: kvm-clock: using sched offset of 7203670996 cycles Oct 2 20:05:19.243737 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 20:05:19.243750 kernel: tsc: Detected 2499.994 MHz processor Oct 2 20:05:19.243763 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:05:19.243779 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:05:19.243791 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 20:05:19.243803 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:05:19.243816 kernel: Using GB pages for direct mapping Oct 2 20:05:19.243828 kernel: ACPI: Early table checksum verification disabled Oct 2 20:05:19.243841 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 20:05:19.243853 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 20:05:19.243866 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 20:05:19.243879 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 20:05:19.243894 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 20:05:19.243906 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:19.243919 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 20:05:19.243931 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 20:05:19.243944 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 20:05:19.243957 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 20:05:19.243969 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 20:05:19.243982 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:19.243997 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 20:05:19.244010 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 20:05:19.244023 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 20:05:19.244041 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 20:05:19.244054 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 20:05:19.244067 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 20:05:19.244081 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 20:05:19.244097 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 20:05:19.244110 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 20:05:19.244124 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 20:05:19.244137 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:05:19.244151 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:05:19.244164 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 20:05:19.244178 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 20:05:19.244191 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 20:05:19.244207 kernel: Zone ranges: Oct 2 20:05:19.244220 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:05:19.244234 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 20:05:19.244247 kernel: Normal empty Oct 2 20:05:19.244260 kernel: Movable zone start for each node Oct 2 20:05:19.244273 kernel: Early memory node ranges Oct 2 20:05:19.244287 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 20:05:19.244300 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 20:05:19.244314 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 20:05:19.244330 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:05:19.244343 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 20:05:19.244357 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 20:05:19.244370 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 20:05:19.244384 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 20:05:19.244398 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 20:05:19.244412 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 20:05:19.244425 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:05:19.244438 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 20:05:19.244455 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 20:05:19.244468 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:05:19.244482 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 20:05:19.244496 kernel: TSC deadline timer available Oct 2 20:05:19.249574 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:05:19.249611 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 20:05:19.249627 kernel: Booting paravirtualized kernel on KVM Oct 2 20:05:19.249642 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:05:19.249657 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:05:19.249680 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:05:19.249694 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:05:19.249708 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:05:19.249722 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 20:05:19.249736 kernel: kvm-guest: PV spinlocks enabled Oct 2 20:05:19.249750 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:05:19.249761 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 20:05:19.249773 kernel: Policy zone: DMA32 Oct 2 20:05:19.249787 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.249808 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:05:19.249823 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:05:19.249840 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:05:19.249856 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:05:19.249873 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 20:05:19.249888 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:05:19.249904 kernel: Kernel/User page tables isolation: enabled Oct 2 20:05:19.249917 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:05:19.249933 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:05:19.249946 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:05:19.249961 kernel: rcu: RCU event tracing is enabled. Oct 2 20:05:19.249975 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:05:19.249988 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:05:19.250002 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:05:19.250016 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:05:19.250030 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:05:19.250043 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 20:05:19.250060 kernel: random: crng init done Oct 2 20:05:19.250073 kernel: Console: colour VGA+ 80x25 Oct 2 20:05:19.250087 kernel: printk: console [ttyS0] enabled Oct 2 20:05:19.250100 kernel: ACPI: Core revision 20210730 Oct 2 20:05:19.250114 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 20:05:19.250127 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:05:19.250141 kernel: x2apic enabled Oct 2 20:05:19.250154 kernel: Switched APIC routing to physical x2apic. Oct 2 20:05:19.250168 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 20:05:19.250312 kernel: Calibrating delay loop (skipped) preset value.. 4999.98 BogoMIPS (lpj=2499994) Oct 2 20:05:19.250332 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:05:19.250346 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:05:19.250360 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:05:19.250422 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:05:19.250440 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:05:19.250455 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:05:19.250470 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:05:19.250485 kernel: RETBleed: Vulnerable Oct 2 20:05:19.250499 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:05:19.250526 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:19.250541 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:19.250555 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:05:19.250569 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:05:19.250587 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:05:19.250602 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:05:19.250616 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 20:05:19.250631 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 20:05:19.250645 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:05:19.250662 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:05:19.250676 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:05:19.250690 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 20:05:19.250705 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:05:19.250719 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 20:05:19.250733 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 20:05:19.250747 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 20:05:19.250761 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 20:05:19.250776 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 20:05:19.250790 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 20:05:19.250804 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 20:05:19.250818 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:05:19.250834 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:05:19.250856 kernel: LSM: Security Framework initializing Oct 2 20:05:19.250870 kernel: SELinux: Initializing. Oct 2 20:05:19.250884 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.250898 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.250913 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:05:19.250927 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:05:19.250941 kernel: signal: max sigframe size: 3632 Oct 2 20:05:19.250955 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:05:19.250970 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:05:19.250987 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:05:19.251001 kernel: x86: Booting SMP configuration: Oct 2 20:05:19.251015 kernel: .... node #0, CPUs: #1 Oct 2 20:05:19.251030 kernel: kvm-clock: cpu 1, msr 18f8a041, secondary cpu clock Oct 2 20:05:19.251044 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 20:05:19.251060 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 20:05:19.251075 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:05:19.251089 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:05:19.251103 kernel: smpboot: Max logical packages: 1 Oct 2 20:05:19.251121 kernel: smpboot: Total of 2 processors activated (9999.97 BogoMIPS) Oct 2 20:05:19.251135 kernel: devtmpfs: initialized Oct 2 20:05:19.251149 kernel: x86/mm: Memory block size: 128MB Oct 2 20:05:19.251163 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:05:19.251178 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.251192 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:05:19.251207 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:05:19.251221 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:05:19.251235 kernel: audit: type=2000 audit(1696277118.554:1): state=initialized audit_enabled=0 res=1 Oct 2 20:05:19.251252 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:05:19.251266 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:05:19.251281 kernel: cpuidle: using governor menu Oct 2 20:05:19.251295 kernel: ACPI: bus type PCI registered Oct 2 20:05:19.251309 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:05:19.251324 kernel: dca service started, version 1.12.1 Oct 2 20:05:19.251338 kernel: PCI: Using configuration type 1 for base access Oct 2 20:05:19.251352 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:05:19.251367 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:05:19.251384 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:05:19.251399 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:05:19.251413 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:05:19.251427 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:05:19.251442 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:05:19.251456 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:05:19.251471 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:05:19.251485 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:05:19.251500 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 20:05:19.251526 kernel: ACPI: Interpreter enabled Oct 2 20:05:19.251541 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:05:19.251556 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:05:19.251570 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:05:19.251584 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 20:05:19.251599 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:05:19.251829 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:05:19.251958 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 20:05:19.251980 kernel: acpiphp: Slot [3] registered Oct 2 20:05:19.251995 kernel: acpiphp: Slot [4] registered Oct 2 20:05:19.252009 kernel: acpiphp: Slot [5] registered Oct 2 20:05:19.252024 kernel: acpiphp: Slot [6] registered Oct 2 20:05:19.252038 kernel: acpiphp: Slot [7] registered Oct 2 20:05:19.252053 kernel: acpiphp: Slot [8] registered Oct 2 20:05:19.252067 kernel: acpiphp: Slot [9] registered Oct 2 20:05:19.252081 kernel: acpiphp: Slot [10] registered Oct 2 20:05:19.252095 kernel: acpiphp: Slot [11] registered Oct 2 20:05:19.252112 kernel: acpiphp: Slot [12] registered Oct 2 20:05:19.252126 kernel: acpiphp: Slot [13] registered Oct 2 20:05:19.252140 kernel: acpiphp: Slot [14] registered Oct 2 20:05:19.252155 kernel: acpiphp: Slot [15] registered Oct 2 20:05:19.252169 kernel: acpiphp: Slot [16] registered Oct 2 20:05:19.252183 kernel: acpiphp: Slot [17] registered Oct 2 20:05:19.252198 kernel: acpiphp: Slot [18] registered Oct 2 20:05:19.252212 kernel: acpiphp: Slot [19] registered Oct 2 20:05:19.252226 kernel: acpiphp: Slot [20] registered Oct 2 20:05:19.252243 kernel: acpiphp: Slot [21] registered Oct 2 20:05:19.252257 kernel: acpiphp: Slot [22] registered Oct 2 20:05:19.252271 kernel: acpiphp: Slot [23] registered Oct 2 20:05:19.252286 kernel: acpiphp: Slot [24] registered Oct 2 20:05:19.252300 kernel: acpiphp: Slot [25] registered Oct 2 20:05:19.252314 kernel: acpiphp: Slot [26] registered Oct 2 20:05:19.252329 kernel: acpiphp: Slot [27] registered Oct 2 20:05:19.252343 kernel: acpiphp: Slot [28] registered Oct 2 20:05:19.252357 kernel: acpiphp: Slot [29] registered Oct 2 20:05:19.252371 kernel: acpiphp: Slot [30] registered Oct 2 20:05:19.252387 kernel: acpiphp: Slot [31] registered Oct 2 20:05:19.252402 kernel: PCI host bridge to bus 0000:00 Oct 2 20:05:19.252536 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 20:05:19.252651 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 20:05:19.252762 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 20:05:19.252870 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 20:05:19.252977 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:05:19.253116 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 20:05:19.253248 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 20:05:19.253379 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 20:05:19.253503 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 20:05:19.261764 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 20:05:19.261901 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 20:05:19.262268 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 20:05:19.262421 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 20:05:19.263603 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 20:05:19.263741 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 20:05:19.263869 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 20:05:19.263996 kernel: pci 0000:00:01.3: quirk_piix4_acpi+0x0/0x170 took 12695 usecs Oct 2 20:05:19.264134 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 20:05:19.264263 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 20:05:19.264396 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 20:05:19.264556 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 20:05:19.264702 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 20:05:19.264828 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 20:05:19.264960 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 20:05:19.265089 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 20:05:19.265549 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 20:05:19.268612 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 20:05:19.268628 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 20:05:19.268641 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 20:05:19.268654 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 20:05:19.268666 kernel: iommu: Default domain type: Translated Oct 2 20:05:19.268686 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:05:19.268887 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 20:05:19.269016 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 20:05:19.269271 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 20:05:19.269295 kernel: vgaarb: loaded Oct 2 20:05:19.269310 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:05:19.269325 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:05:19.269339 kernel: PTP clock support registered Oct 2 20:05:19.269353 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:05:19.269368 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 20:05:19.269383 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 20:05:19.269402 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 20:05:19.269416 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 20:05:19.269430 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 20:05:19.269445 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 20:05:19.269459 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:05:19.269474 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:05:19.269488 kernel: pnp: PnP ACPI init Oct 2 20:05:19.269503 kernel: pnp: PnP ACPI: found 5 devices Oct 2 20:05:19.273615 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:05:19.273645 kernel: NET: Registered PF_INET protocol family Oct 2 20:05:19.273660 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.273675 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 20:05:19.273690 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.273705 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:05:19.273720 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.273735 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 20:05:19.273750 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.273765 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.273782 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:05:19.273797 kernel: NET: Registered PF_XDP protocol family Oct 2 20:05:19.273984 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 20:05:19.274097 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 20:05:19.274204 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 20:05:19.274310 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 20:05:19.274438 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 20:05:19.274575 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 20:05:19.274598 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:05:19.274613 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:05:19.274626 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 20:05:19.274657 kernel: clocksource: Switched to clocksource tsc Oct 2 20:05:19.274671 kernel: Initialise system trusted keyrings Oct 2 20:05:19.274696 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 20:05:19.274711 kernel: Key type asymmetric registered Oct 2 20:05:19.274723 kernel: Asymmetric key parser 'x509' registered Oct 2 20:05:19.274740 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:05:19.274754 kernel: io scheduler mq-deadline registered Oct 2 20:05:19.274768 kernel: io scheduler kyber registered Oct 2 20:05:19.274783 kernel: io scheduler bfq registered Oct 2 20:05:19.274798 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:05:19.274812 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:05:19.274827 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:05:19.274840 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 20:05:19.274861 kernel: i8042: Warning: Keylock active Oct 2 20:05:19.274877 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 20:05:19.274891 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 20:05:19.275182 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 20:05:19.275325 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 20:05:19.275466 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T20:05:18 UTC (1696277118) Oct 2 20:05:19.275627 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 20:05:19.275652 kernel: intel_pstate: CPU model not supported Oct 2 20:05:19.275668 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:05:19.275687 kernel: Segment Routing with IPv6 Oct 2 20:05:19.275707 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:05:19.275721 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:05:19.275735 kernel: Key type dns_resolver registered Oct 2 20:05:19.275755 kernel: IPI shorthand broadcast: enabled Oct 2 20:05:19.275770 kernel: sched_clock: Marking stable (538823009, 297212939)->(966381607, -130345659) Oct 2 20:05:19.275784 kernel: registered taskstats version 1 Oct 2 20:05:19.275797 kernel: Loading compiled-in X.509 certificates Oct 2 20:05:19.275812 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:05:19.275829 kernel: Key type .fscrypt registered Oct 2 20:05:19.275844 kernel: Key type fscrypt-provisioning registered Oct 2 20:05:19.275859 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:05:19.275874 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:05:19.275888 kernel: ima: No architecture policies found Oct 2 20:05:19.275902 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:05:19.275918 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:05:19.275933 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:05:19.275947 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:05:19.275965 kernel: Run /init as init process Oct 2 20:05:19.275980 kernel: with arguments: Oct 2 20:05:19.275994 kernel: /init Oct 2 20:05:19.276008 kernel: with environment: Oct 2 20:05:19.276023 kernel: HOME=/ Oct 2 20:05:19.276036 kernel: TERM=linux Oct 2 20:05:19.276050 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:05:19.276069 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:19.276091 systemd[1]: Detected virtualization amazon. Oct 2 20:05:19.276107 systemd[1]: Detected architecture x86-64. Oct 2 20:05:19.276122 systemd[1]: Running in initrd. Oct 2 20:05:19.276138 systemd[1]: No hostname configured, using default hostname. Oct 2 20:05:19.276168 systemd[1]: Hostname set to . Oct 2 20:05:19.276191 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:19.276207 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 20:05:19.276222 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:05:19.276238 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:19.276257 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:19.276273 systemd[1]: Reached target paths.target. Oct 2 20:05:19.276289 systemd[1]: Reached target slices.target. Oct 2 20:05:19.276304 systemd[1]: Reached target swap.target. Oct 2 20:05:19.276320 systemd[1]: Reached target timers.target. Oct 2 20:05:19.276339 systemd[1]: Listening on iscsid.socket. Oct 2 20:05:19.276355 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:05:19.276371 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:05:19.276387 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:05:19.276403 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:05:19.276419 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:19.276435 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:19.276454 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:19.276471 systemd[1]: Reached target sockets.target. Oct 2 20:05:19.276486 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:19.276503 systemd[1]: Finished network-cleanup.service. Oct 2 20:05:19.276528 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:05:19.276544 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:19.276560 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:19.276575 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:19.276592 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:05:19.276610 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:19.276626 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:05:19.276642 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:05:19.276658 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:05:19.276673 kernel: Bridge firewalling registered Oct 2 20:05:19.276689 kernel: SCSI subsystem initialized Oct 2 20:05:19.276704 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:05:19.276729 systemd-journald[185]: Journal started Oct 2 20:05:19.276811 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2cf7ca3290bb3606723d2e81600cf2) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:19.182091 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 20:05:19.404805 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:05:19.404845 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:05:19.235404 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 20:05:19.289313 systemd-resolved[187]: Positive Trust Anchors: Oct 2 20:05:19.289327 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:19.422538 systemd[1]: Started systemd-journald.service. Oct 2 20:05:19.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.289377 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:19.441959 kernel: audit: type=1130 audit(1696277119.422:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.293021 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 20:05:19.299383 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 20:05:19.456086 kernel: audit: type=1130 audit(1696277119.441:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.459940 kernel: audit: type=1130 audit(1696277119.443:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.460008 kernel: audit: type=1130 audit(1696277119.456:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.427158 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:19.468722 kernel: audit: type=1130 audit(1696277119.466:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.442369 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:19.444669 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:05:19.457941 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:05:19.467855 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:19.480769 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:05:19.483397 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:19.502812 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:19.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.510533 kernel: audit: type=1130 audit(1696277119.504:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.533650 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:05:19.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.542566 kernel: audit: type=1130 audit(1696277119.534:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.543088 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:05:19.558829 dracut-cmdline[207]: dracut-dracut-053 Oct 2 20:05:19.562196 dracut-cmdline[207]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.678539 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:05:19.693543 kernel: iscsi: registered transport (tcp) Oct 2 20:05:19.719569 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:05:19.719643 kernel: QLogic iSCSI HBA Driver Oct 2 20:05:19.759479 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:05:19.768106 kernel: audit: type=1130 audit(1696277119.761:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.767599 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:05:19.849573 kernel: raid6: avx512x4 gen() 8011 MB/s Oct 2 20:05:19.868915 kernel: raid6: avx512x4 xor() 2260 MB/s Oct 2 20:05:19.886581 kernel: raid6: avx512x2 gen() 8657 MB/s Oct 2 20:05:19.904576 kernel: raid6: avx512x2 xor() 13907 MB/s Oct 2 20:05:19.922571 kernel: raid6: avx512x1 gen() 9610 MB/s Oct 2 20:05:19.942590 kernel: raid6: avx512x1 xor() 14473 MB/s Oct 2 20:05:19.970591 kernel: raid6: avx2x4 gen() 11718 MB/s Oct 2 20:05:19.990212 kernel: raid6: avx2x4 xor() 3208 MB/s Oct 2 20:05:20.007571 kernel: raid6: avx2x2 gen() 6382 MB/s Oct 2 20:05:20.025559 kernel: raid6: avx2x2 xor() 8793 MB/s Oct 2 20:05:20.043599 kernel: raid6: avx2x1 gen() 6703 MB/s Oct 2 20:05:20.061553 kernel: raid6: avx2x1 xor() 12741 MB/s Oct 2 20:05:20.082384 kernel: raid6: sse2x4 gen() 3654 MB/s Oct 2 20:05:20.103852 kernel: raid6: sse2x4 xor() 779 MB/s Oct 2 20:05:20.119568 kernel: raid6: sse2x2 gen() 5178 MB/s Oct 2 20:05:20.137554 kernel: raid6: sse2x2 xor() 3386 MB/s Oct 2 20:05:20.155564 kernel: raid6: sse2x1 gen() 7677 MB/s Oct 2 20:05:20.173758 kernel: raid6: sse2x1 xor() 4033 MB/s Oct 2 20:05:20.173833 kernel: raid6: using algorithm avx2x4 gen() 11718 MB/s Oct 2 20:05:20.173851 kernel: raid6: .... xor() 3208 MB/s, rmw enabled Oct 2 20:05:20.175233 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:05:20.191655 kernel: xor: automatically using best checksumming function avx Oct 2 20:05:20.330541 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:05:20.341738 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:05:20.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.348619 kernel: audit: type=1130 audit(1696277120.343:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.348000 audit: BPF prog-id=7 op=LOAD Oct 2 20:05:20.348000 audit: BPF prog-id=8 op=LOAD Oct 2 20:05:20.349586 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:20.378359 systemd-udevd[385]: Using default interface naming scheme 'v252'. Oct 2 20:05:20.385086 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:20.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.387406 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:05:20.414467 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Oct 2 20:05:20.453006 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:05:20.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.455272 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:20.511736 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:20.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.601566 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:05:20.601638 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 20:05:20.601831 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 20:05:20.608617 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 20:05:20.620533 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:7e:d0:e7:74:4f Oct 2 20:05:20.622293 (udev-worker)[435]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:20.643354 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:05:20.643385 kernel: AES CTR mode by8 optimization enabled Oct 2 20:05:20.654910 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 20:05:20.655169 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 20:05:20.676640 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 20:05:20.680534 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 20:05:20.680607 kernel: GPT:9289727 != 16777215 Oct 2 20:05:20.680629 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 20:05:20.680647 kernel: GPT:9289727 != 16777215 Oct 2 20:05:20.680662 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 20:05:20.680679 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:20.760539 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (436) Oct 2 20:05:20.794830 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:05:20.894493 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:05:20.901938 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:20.914830 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:05:20.916640 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:05:20.921851 systemd[1]: Starting disk-uuid.service... Oct 2 20:05:20.930898 disk-uuid[585]: Primary Header is updated. Oct 2 20:05:20.930898 disk-uuid[585]: Secondary Entries is updated. Oct 2 20:05:20.930898 disk-uuid[585]: Secondary Header is updated. Oct 2 20:05:20.939537 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:21.954277 disk-uuid[586]: The operation has completed successfully. Oct 2 20:05:21.955794 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:22.102619 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:05:22.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.102733 systemd[1]: Finished disk-uuid.service. Oct 2 20:05:22.121338 systemd[1]: Starting verity-setup.service... Oct 2 20:05:22.162813 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:05:22.278229 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:05:22.282959 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:05:22.291946 systemd[1]: Finished verity-setup.service. Oct 2 20:05:22.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.402543 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:05:22.402551 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:05:22.403740 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:05:22.404852 systemd[1]: Starting ignition-setup.service... Oct 2 20:05:22.411395 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:05:22.431312 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:22.431378 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:22.431398 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:22.464535 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:22.481484 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:05:22.500991 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:05:22.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.502000 audit: BPF prog-id=9 op=LOAD Oct 2 20:05:22.504158 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:22.519285 systemd[1]: Finished ignition-setup.service. Oct 2 20:05:22.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.521659 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:05:22.544717 systemd-networkd[1097]: lo: Link UP Oct 2 20:05:22.544729 systemd-networkd[1097]: lo: Gained carrier Oct 2 20:05:22.546078 systemd-networkd[1097]: Enumeration completed Oct 2 20:05:22.546351 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:22.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.546718 systemd-networkd[1097]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:22.556806 systemd[1]: Reached target network.target. Oct 2 20:05:22.571255 systemd[1]: Starting iscsiuio.service... Oct 2 20:05:22.572497 systemd-networkd[1097]: eth0: Link UP Oct 2 20:05:22.572503 systemd-networkd[1097]: eth0: Gained carrier Oct 2 20:05:22.582830 systemd[1]: Started iscsiuio.service. Oct 2 20:05:22.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.586877 systemd[1]: Starting iscsid.service... Oct 2 20:05:22.593994 iscsid[1104]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:22.593994 iscsid[1104]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 20:05:22.593994 iscsid[1104]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:05:22.593994 iscsid[1104]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:05:22.593994 iscsid[1104]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:05:22.593994 iscsid[1104]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:22.593994 iscsid[1104]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:05:22.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.600624 systemd[1]: Started iscsid.service. Oct 2 20:05:22.607653 systemd-networkd[1097]: eth0: DHCPv4 address 172.31.26.158/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:22.617943 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:05:22.646996 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:05:22.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.647237 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:05:22.652633 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:22.655625 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:22.659777 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:05:22.676429 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:05:22.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.345974 ignition[1099]: Ignition 2.14.0 Oct 2 20:05:23.345990 ignition[1099]: Stage: fetch-offline Oct 2 20:05:23.346131 ignition[1099]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.346185 ignition[1099]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.372793 ignition[1099]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.374667 ignition[1099]: Ignition finished successfully Oct 2 20:05:23.377052 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:05:23.388791 kernel: kauditd_printk_skb: 16 callbacks suppressed Oct 2 20:05:23.389113 kernel: audit: type=1130 audit(1696277123.376:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.378565 systemd[1]: Starting ignition-fetch.service... Oct 2 20:05:23.393846 ignition[1123]: Ignition 2.14.0 Oct 2 20:05:23.393855 ignition[1123]: Stage: fetch Oct 2 20:05:23.394188 ignition[1123]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.394279 ignition[1123]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.407052 ignition[1123]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.408656 ignition[1123]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.418154 ignition[1123]: INFO : PUT result: OK Oct 2 20:05:23.420832 ignition[1123]: DEBUG : parsed url from cmdline: "" Oct 2 20:05:23.420832 ignition[1123]: INFO : no config URL provided Oct 2 20:05:23.420832 ignition[1123]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:05:23.420832 ignition[1123]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 20:05:23.429355 ignition[1123]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.429355 ignition[1123]: INFO : PUT result: OK Oct 2 20:05:23.429355 ignition[1123]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 20:05:23.429355 ignition[1123]: INFO : GET result: OK Oct 2 20:05:23.429355 ignition[1123]: DEBUG : parsing config with SHA512: a5fd2b243c0e7e72b1df766bd113dc935be35ee6e44a8086ec546eba82c8ce1a9560662fa359db442e1f8b13d75c1f745b945aa266ea287d6f5fbfd4d95f48fe Oct 2 20:05:23.464075 unknown[1123]: fetched base config from "system" Oct 2 20:05:23.464090 unknown[1123]: fetched base config from "system" Oct 2 20:05:23.464098 unknown[1123]: fetched user config from "aws" Oct 2 20:05:23.468265 ignition[1123]: fetch: fetch complete Oct 2 20:05:23.468341 ignition[1123]: fetch: fetch passed Oct 2 20:05:23.468411 ignition[1123]: Ignition finished successfully Oct 2 20:05:23.472713 systemd[1]: Finished ignition-fetch.service. Oct 2 20:05:23.484763 kernel: audit: type=1130 audit(1696277123.472:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.474210 systemd[1]: Starting ignition-kargs.service... Oct 2 20:05:23.495554 ignition[1129]: Ignition 2.14.0 Oct 2 20:05:23.495566 ignition[1129]: Stage: kargs Oct 2 20:05:23.495768 ignition[1129]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.495800 ignition[1129]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.507077 ignition[1129]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.508768 ignition[1129]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.511722 ignition[1129]: INFO : PUT result: OK Oct 2 20:05:23.515845 ignition[1129]: kargs: kargs passed Oct 2 20:05:23.516013 ignition[1129]: Ignition finished successfully Oct 2 20:05:23.519807 systemd[1]: Finished ignition-kargs.service. Oct 2 20:05:23.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.523420 systemd[1]: Starting ignition-disks.service... Oct 2 20:05:23.533474 kernel: audit: type=1130 audit(1696277123.521:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.536661 ignition[1135]: Ignition 2.14.0 Oct 2 20:05:23.536673 ignition[1135]: Stage: disks Oct 2 20:05:23.536876 ignition[1135]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.536906 ignition[1135]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.545568 ignition[1135]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.547376 ignition[1135]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.548944 ignition[1135]: INFO : PUT result: OK Oct 2 20:05:23.553037 ignition[1135]: disks: disks passed Oct 2 20:05:23.553090 ignition[1135]: Ignition finished successfully Oct 2 20:05:23.555292 systemd[1]: Finished ignition-disks.service. Oct 2 20:05:23.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.557290 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:05:23.561522 kernel: audit: type=1130 audit(1696277123.557:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.563497 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:23.564789 systemd[1]: Reached target local-fs.target. Oct 2 20:05:23.567556 systemd[1]: Reached target sysinit.target. Oct 2 20:05:23.567623 systemd[1]: Reached target basic.target. Oct 2 20:05:23.571692 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:05:23.622484 systemd-fsck[1143]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 20:05:23.627088 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:05:23.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.629155 systemd[1]: Mounting sysroot.mount... Oct 2 20:05:23.637402 kernel: audit: type=1130 audit(1696277123.628:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.651550 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:05:23.652484 systemd[1]: Mounted sysroot.mount. Oct 2 20:05:23.654457 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:05:23.660244 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:05:23.666726 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:05:23.666773 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:05:23.666801 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:05:23.679775 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:05:23.697126 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:23.701852 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:05:23.718541 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1160) Oct 2 20:05:23.721840 initrd-setup-root[1165]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:05:23.727540 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:23.727575 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:23.727587 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:23.735541 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:23.739524 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:23.744355 initrd-setup-root[1191]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:05:23.750206 initrd-setup-root[1199]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:05:23.757634 initrd-setup-root[1207]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:05:24.033282 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:05:24.045149 kernel: audit: type=1130 audit(1696277124.033:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.035031 systemd[1]: Starting ignition-mount.service... Oct 2 20:05:24.050571 systemd[1]: Starting sysroot-boot.service... Oct 2 20:05:24.056470 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:24.056618 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:24.089164 ignition[1225]: INFO : Ignition 2.14.0 Oct 2 20:05:24.089164 ignition[1225]: INFO : Stage: mount Oct 2 20:05:24.094661 ignition[1225]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:24.094661 ignition[1225]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:24.112164 ignition[1225]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:24.114137 ignition[1225]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:24.116541 ignition[1225]: INFO : PUT result: OK Oct 2 20:05:24.124778 ignition[1225]: INFO : mount: mount passed Oct 2 20:05:24.128739 ignition[1225]: INFO : Ignition finished successfully Oct 2 20:05:24.130645 systemd[1]: Finished sysroot-boot.service. Oct 2 20:05:24.132951 systemd[1]: Finished ignition-mount.service. Oct 2 20:05:24.150056 kernel: audit: type=1130 audit(1696277124.132:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.150092 kernel: audit: type=1130 audit(1696277124.134:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.137381 systemd[1]: Starting ignition-files.service... Oct 2 20:05:24.156914 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:24.190546 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1235) Oct 2 20:05:24.196562 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:24.196722 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:24.201540 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:24.208900 systemd-networkd[1097]: eth0: Gained IPv6LL Oct 2 20:05:24.221536 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:24.229838 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:24.244852 ignition[1254]: INFO : Ignition 2.14.0 Oct 2 20:05:24.244852 ignition[1254]: INFO : Stage: files Oct 2 20:05:24.246925 ignition[1254]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:24.246925 ignition[1254]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:24.258244 ignition[1254]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:24.260376 ignition[1254]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:24.262050 ignition[1254]: INFO : PUT result: OK Oct 2 20:05:24.267528 ignition[1254]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:05:24.281223 ignition[1254]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:05:24.281223 ignition[1254]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:05:24.300028 ignition[1254]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:05:24.303205 ignition[1254]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:05:24.308225 unknown[1254]: wrote ssh authorized keys file for user: core Oct 2 20:05:24.310233 ignition[1254]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:05:24.310233 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:05:24.310233 ignition[1254]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 20:05:24.665430 ignition[1254]: INFO : GET result: OK Oct 2 20:05:24.974684 ignition[1254]: DEBUG : file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 20:05:24.978330 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:05:24.978330 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:05:24.978330 ignition[1254]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:25.221071 ignition[1254]: INFO : GET result: OK Oct 2 20:05:25.361087 ignition[1254]: DEBUG : file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 20:05:25.367738 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:05:25.367738 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:25.367738 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:25.367738 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:25.367738 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:25.396312 ignition[1254]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2983043555" Oct 2 20:05:25.402614 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1254) Oct 2 20:05:25.402651 ignition[1254]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2983043555": device or resource busy Oct 2 20:05:25.402651 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2983043555", trying btrfs: device or resource busy Oct 2 20:05:25.402651 ignition[1254]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2983043555" Oct 2 20:05:25.402651 ignition[1254]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2983043555" Oct 2 20:05:25.418150 ignition[1254]: INFO : op(3): [started] unmounting "/mnt/oem2983043555" Oct 2 20:05:25.418150 ignition[1254]: INFO : op(3): [finished] unmounting "/mnt/oem2983043555" Oct 2 20:05:25.418150 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:25.426826 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:25.426826 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:05:25.420304 systemd[1]: mnt-oem2983043555.mount: Deactivated successfully. Oct 2 20:05:25.525615 ignition[1254]: INFO : GET result: OK Oct 2 20:05:27.196864 ignition[1254]: DEBUG : file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 20:05:27.200741 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:27.200741 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:27.200741 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:05:27.261614 ignition[1254]: INFO : GET result: OK Oct 2 20:05:32.199495 ignition[1254]: DEBUG : file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 20:05:32.207228 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:32.207228 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:32.207228 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:05:32.269039 ignition[1254]: INFO : GET result: OK Oct 2 20:05:34.385430 ignition[1254]: DEBUG : file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 20:05:34.388768 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:34.388768 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:34.388768 ignition[1254]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:34.614869 ignition[1254]: INFO : GET result: OK Oct 2 20:05:34.812173 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:34.812173 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:34.817358 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:34.817358 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:34.821722 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:34.829214 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:34.829214 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:34.838321 ignition[1254]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem956563086" Oct 2 20:05:34.840336 ignition[1254]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem956563086": device or resource busy Oct 2 20:05:34.840336 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem956563086", trying btrfs: device or resource busy Oct 2 20:05:34.840336 ignition[1254]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem956563086" Oct 2 20:05:34.840336 ignition[1254]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem956563086" Oct 2 20:05:34.840336 ignition[1254]: INFO : op(6): [started] unmounting "/mnt/oem956563086" Oct 2 20:05:34.850479 ignition[1254]: INFO : op(6): [finished] unmounting "/mnt/oem956563086" Oct 2 20:05:34.850479 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:34.850479 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:34.850479 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:34.865573 ignition[1254]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1898621751" Oct 2 20:05:34.867649 ignition[1254]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1898621751": device or resource busy Oct 2 20:05:34.867649 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1898621751", trying btrfs: device or resource busy Oct 2 20:05:34.867649 ignition[1254]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1898621751" Oct 2 20:05:34.875780 ignition[1254]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1898621751" Oct 2 20:05:34.875780 ignition[1254]: INFO : op(9): [started] unmounting "/mnt/oem1898621751" Oct 2 20:05:34.875780 ignition[1254]: INFO : op(9): [finished] unmounting "/mnt/oem1898621751" Oct 2 20:05:34.875780 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:34.875780 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:34.875780 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:34.895980 systemd[1]: mnt-oem1898621751.mount: Deactivated successfully. Oct 2 20:05:34.911822 ignition[1254]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1612216855" Oct 2 20:05:34.913711 ignition[1254]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1612216855": device or resource busy Oct 2 20:05:34.913711 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1612216855", trying btrfs: device or resource busy Oct 2 20:05:34.913711 ignition[1254]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1612216855" Oct 2 20:05:34.913711 ignition[1254]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1612216855" Oct 2 20:05:34.913711 ignition[1254]: INFO : op(c): [started] unmounting "/mnt/oem1612216855" Oct 2 20:05:34.923767 ignition[1254]: INFO : op(c): [finished] unmounting "/mnt/oem1612216855" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(10): [started] processing unit "nvidia.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(10): [finished] processing unit "nvidia.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(11): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(11): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(12): [started] processing unit "amazon-ssm-agent.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(12): op(13): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(12): op(13): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(12): [finished] processing unit "amazon-ssm-agent.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(14): [started] processing unit "prepare-critools.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(14): op(15): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(14): op(15): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(14): [finished] processing unit "prepare-critools.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(18): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:34.923767 ignition[1254]: INFO : files: op(18): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(19): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(1c): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:34.972613 ignition[1254]: INFO : files: op(1c): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:34.992589 ignition[1254]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:34.995737 ignition[1254]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:34.998094 ignition[1254]: INFO : files: files passed Oct 2 20:05:34.998094 ignition[1254]: INFO : Ignition finished successfully Oct 2 20:05:35.001637 systemd[1]: Finished ignition-files.service. Oct 2 20:05:35.010675 kernel: audit: type=1130 audit(1696277135.001:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.012723 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:05:35.012885 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:05:35.014186 systemd[1]: Starting ignition-quench.service... Oct 2 20:05:35.030215 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:05:35.030472 systemd[1]: Finished ignition-quench.service. Oct 2 20:05:35.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.043453 kernel: audit: type=1130 audit(1696277135.032:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.043564 kernel: audit: type=1131 audit(1696277135.032:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.044890 initrd-setup-root-after-ignition[1279]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:05:35.045925 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:05:35.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.050569 systemd[1]: Reached target ignition-complete.target. Oct 2 20:05:35.075670 kernel: audit: type=1130 audit(1696277135.049:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.081424 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:05:35.100215 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:05:35.100320 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:05:35.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.104287 systemd[1]: Reached target initrd-fs.target. Oct 2 20:05:35.114493 kernel: audit: type=1130 audit(1696277135.103:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.114534 kernel: audit: type=1131 audit(1696277135.103:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.112573 systemd[1]: Reached target initrd.target. Oct 2 20:05:35.120038 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:05:35.124947 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:05:35.137210 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:05:35.144843 kernel: audit: type=1130 audit(1696277135.137:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.139344 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:05:35.152807 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:05:35.153037 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:05:35.157871 systemd[1]: Stopped target timers.target. Oct 2 20:05:35.159955 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:05:35.161296 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:05:35.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.163685 systemd[1]: Stopped target initrd.target. Oct 2 20:05:35.168536 kernel: audit: type=1131 audit(1696277135.162:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.170168 systemd[1]: Stopped target basic.target. Oct 2 20:05:35.172829 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:05:35.177810 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:05:35.187904 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:05:35.193833 systemd[1]: Stopped target remote-fs.target. Oct 2 20:05:35.196349 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:05:35.203683 systemd[1]: Stopped target sysinit.target. Oct 2 20:05:35.206787 systemd[1]: Stopped target local-fs.target. Oct 2 20:05:35.209344 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:05:35.214364 systemd[1]: Stopped target swap.target. Oct 2 20:05:35.216555 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:05:35.218021 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:05:35.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.221015 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:05:35.227160 kernel: audit: type=1131 audit(1696277135.220:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.227357 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:05:35.228590 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:05:35.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.231137 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:05:35.231351 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:05:35.236541 kernel: audit: type=1131 audit(1696277135.230:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.239589 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:05:35.241024 systemd[1]: Stopped ignition-files.service. Oct 2 20:05:35.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.245305 systemd[1]: Stopping ignition-mount.service... Oct 2 20:05:35.247954 systemd[1]: Stopping iscsiuio.service... Oct 2 20:05:35.252490 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:05:35.253851 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:05:35.257970 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:05:35.261599 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:05:35.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.264146 ignition[1292]: INFO : Ignition 2.14.0 Oct 2 20:05:35.264146 ignition[1292]: INFO : Stage: umount Oct 2 20:05:35.264146 ignition[1292]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:35.264146 ignition[1292]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:35.274117 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:05:35.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.279101 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:05:35.281235 systemd[1]: Stopped iscsiuio.service. Oct 2 20:05:35.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.285604 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:05:35.285697 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:05:35.287931 ignition[1292]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:35.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.290939 ignition[1292]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:35.290939 ignition[1292]: INFO : PUT result: OK Oct 2 20:05:35.296678 ignition[1292]: INFO : umount: umount passed Oct 2 20:05:35.297854 ignition[1292]: INFO : Ignition finished successfully Oct 2 20:05:35.297895 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:05:35.297985 systemd[1]: Stopped ignition-mount.service. Oct 2 20:05:35.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.302899 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:05:35.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.302975 systemd[1]: Stopped ignition-disks.service. Oct 2 20:05:35.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.304179 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:05:35.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.304231 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:05:35.305321 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:05:35.305375 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:05:35.307390 systemd[1]: Stopped target network.target. Oct 2 20:05:35.308501 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:05:35.308581 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:05:35.310598 systemd[1]: Stopped target paths.target. Oct 2 20:05:35.311705 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:05:35.317040 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:05:35.320357 systemd[1]: Stopped target slices.target. Oct 2 20:05:35.321266 systemd[1]: Stopped target sockets.target. Oct 2 20:05:35.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.323472 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:05:35.323528 systemd[1]: Closed iscsid.socket. Oct 2 20:05:35.325413 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:05:35.325463 systemd[1]: Closed iscsiuio.socket. Oct 2 20:05:35.327388 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:05:35.327450 systemd[1]: Stopped ignition-setup.service. Oct 2 20:05:35.329274 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:05:35.334584 systemd-networkd[1097]: eth0: DHCPv6 lease lost Oct 2 20:05:35.335624 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:05:35.343069 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:05:35.343335 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:05:35.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.354997 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:05:35.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.355122 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:05:35.357000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:05:35.358313 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:05:35.358000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:05:35.358357 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:05:35.361488 systemd[1]: Stopping network-cleanup.service... Oct 2 20:05:35.366041 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:05:35.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.366110 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:05:35.368807 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:05:35.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.368859 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:05:35.384232 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:05:35.384420 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:05:35.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.387397 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:05:35.392320 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:05:35.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.392585 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:05:35.395797 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:05:35.395841 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:05:35.407010 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:05:35.407068 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:05:35.411842 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:05:35.413497 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:05:35.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.415562 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:05:35.415612 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:05:35.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.418642 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:05:35.418693 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:05:35.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.422978 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:05:35.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.432629 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:05:35.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.432823 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:05:35.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.435588 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:05:35.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.435657 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:05:35.438579 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:05:35.438645 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:05:35.440345 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:05:35.440608 systemd[1]: Stopped network-cleanup.service. Oct 2 20:05:35.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.448734 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:05:35.449977 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:05:35.624759 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:05:35.624879 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:05:35.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.628067 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:05:35.630076 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:05:35.630155 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:05:35.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.634676 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:05:35.651292 systemd[1]: Switching root. Oct 2 20:05:35.674730 iscsid[1104]: iscsid shutting down. Oct 2 20:05:35.676924 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 20:05:35.677037 systemd-journald[185]: Journal stopped Oct 2 20:05:41.212318 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:05:41.212417 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:05:41.212442 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:05:41.212461 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:05:41.212480 kernel: SELinux: policy capability open_perms=1 Oct 2 20:05:41.212498 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:05:41.212529 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:05:41.212552 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:05:41.212569 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:05:41.212588 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:05:41.212609 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:05:41.212659 systemd[1]: Successfully loaded SELinux policy in 97.803ms. Oct 2 20:05:41.212695 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 30.721ms. Oct 2 20:05:41.212716 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:41.212736 systemd[1]: Detected virtualization amazon. Oct 2 20:05:41.212757 systemd[1]: Detected architecture x86-64. Oct 2 20:05:41.212780 systemd[1]: Detected first boot. Oct 2 20:05:41.212799 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:41.212818 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:05:41.212907 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:41.212930 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:41.212951 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:41.212976 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 20:05:41.212993 kernel: audit: type=1334 audit(1696277140.842:84): prog-id=12 op=LOAD Oct 2 20:05:41.213011 kernel: audit: type=1334 audit(1696277140.842:85): prog-id=3 op=UNLOAD Oct 2 20:05:41.213030 kernel: audit: type=1334 audit(1696277140.844:86): prog-id=13 op=LOAD Oct 2 20:05:41.213048 kernel: audit: type=1334 audit(1696277140.845:87): prog-id=14 op=LOAD Oct 2 20:05:41.213065 kernel: audit: type=1334 audit(1696277140.845:88): prog-id=4 op=UNLOAD Oct 2 20:05:41.213083 kernel: audit: type=1334 audit(1696277140.845:89): prog-id=5 op=UNLOAD Oct 2 20:05:41.213101 kernel: audit: type=1334 audit(1696277140.849:90): prog-id=15 op=LOAD Oct 2 20:05:41.213118 kernel: audit: type=1334 audit(1696277140.849:91): prog-id=12 op=UNLOAD Oct 2 20:05:41.213139 kernel: audit: type=1334 audit(1696277140.850:92): prog-id=16 op=LOAD Oct 2 20:05:41.213157 kernel: audit: type=1334 audit(1696277140.853:93): prog-id=17 op=LOAD Oct 2 20:05:41.213174 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:05:41.213192 systemd[1]: Stopped iscsid.service. Oct 2 20:05:41.213211 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:05:41.213229 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:05:41.213248 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:05:41.213270 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:05:41.213319 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:05:41.213341 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 20:05:41.215568 systemd[1]: Created slice system-getty.slice. Oct 2 20:05:41.215610 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:05:41.215632 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:05:41.215653 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:05:41.215794 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:05:41.215819 systemd[1]: Created slice user.slice. Oct 2 20:05:41.215877 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:41.215898 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:05:41.215917 systemd[1]: Set up automount boot.automount. Oct 2 20:05:41.215936 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:05:41.215955 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:05:41.215975 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:05:41.215994 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:05:41.216013 systemd[1]: Reached target integritysetup.target. Oct 2 20:05:41.216033 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:41.216055 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:41.216074 systemd[1]: Reached target slices.target. Oct 2 20:05:41.216093 systemd[1]: Reached target swap.target. Oct 2 20:05:41.216112 systemd[1]: Reached target torcx.target. Oct 2 20:05:41.216130 systemd[1]: Reached target veritysetup.target. Oct 2 20:05:41.216150 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:05:41.216178 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:05:41.216199 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:41.216219 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:41.216238 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:41.216257 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:05:41.216276 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:05:41.216294 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:05:41.216311 systemd[1]: Mounting media.mount... Oct 2 20:05:41.216329 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:41.216348 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:05:41.216380 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:05:41.216398 systemd[1]: Mounting tmp.mount... Oct 2 20:05:41.216416 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:05:41.216434 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:05:41.216454 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:41.216476 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:05:41.216496 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:05:41.218506 systemd[1]: Starting modprobe@drm.service... Oct 2 20:05:41.218571 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:05:41.218594 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:05:41.218613 systemd[1]: Starting modprobe@loop.service... Oct 2 20:05:41.218635 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:05:41.218654 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:05:41.218714 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:05:41.218734 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:05:41.218831 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:05:41.218894 systemd[1]: Stopped systemd-journald.service. Oct 2 20:05:41.218914 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:41.218935 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:41.218958 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:05:41.218979 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:05:41.218999 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:41.219021 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:05:41.219042 systemd[1]: Stopped verity-setup.service. Oct 2 20:05:41.219062 kernel: loop: module loaded Oct 2 20:05:41.219114 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:41.219139 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:05:41.219161 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:05:41.219181 systemd[1]: Mounted media.mount. Oct 2 20:05:41.219202 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:05:41.219224 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:05:41.219246 systemd[1]: Mounted tmp.mount. Oct 2 20:05:41.219267 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:41.219289 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:05:41.219310 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:05:41.219333 kernel: fuse: init (API version 7.34) Oct 2 20:05:41.219354 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:05:41.219375 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:05:41.219396 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:05:41.219417 systemd[1]: Finished modprobe@drm.service. Oct 2 20:05:41.219441 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:05:41.219461 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:05:41.219483 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:05:41.219507 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:05:41.219618 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:05:41.219636 systemd[1]: Finished modprobe@loop.service. Oct 2 20:05:41.219660 systemd-journald[1405]: Journal started Oct 2 20:05:41.219741 systemd-journald[1405]: Runtime Journal (/run/log/journal/ec2cf7ca3290bb3606723d2e81600cf2) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:36.314000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:05:36.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:36.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:36.505000 audit: BPF prog-id=10 op=LOAD Oct 2 20:05:36.505000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:05:36.505000 audit: BPF prog-id=11 op=LOAD Oct 2 20:05:36.505000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:05:40.842000 audit: BPF prog-id=12 op=LOAD Oct 2 20:05:40.842000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:05:40.844000 audit: BPF prog-id=13 op=LOAD Oct 2 20:05:40.845000 audit: BPF prog-id=14 op=LOAD Oct 2 20:05:40.845000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:05:40.845000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:05:40.849000 audit: BPF prog-id=15 op=LOAD Oct 2 20:05:40.849000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:05:40.850000 audit: BPF prog-id=16 op=LOAD Oct 2 20:05:40.853000 audit: BPF prog-id=17 op=LOAD Oct 2 20:05:40.853000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:05:40.853000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:05:40.860000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:05:40.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.095000 audit: BPF prog-id=18 op=LOAD Oct 2 20:05:41.096000 audit: BPF prog-id=19 op=LOAD Oct 2 20:05:41.096000 audit: BPF prog-id=20 op=LOAD Oct 2 20:05:41.096000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:05:41.096000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:05:41.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.201000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:05:41.201000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd2fe176a0 a2=4000 a3=7ffd2fe1773c items=0 ppid=1 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:41.201000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:05:41.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.758945 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:41.224370 systemd[1]: Started systemd-journald.service. Oct 2 20:05:40.841662 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:05:41.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.760110 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:40.856175 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:05:36.760142 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:41.227566 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:36.760217 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:05:36.760234 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:05:36.760310 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:05:41.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.760358 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:05:41.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.231284 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:05:36.760930 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:05:41.237737 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:05:36.761064 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:36.761089 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:36.762371 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:05:41.245156 systemd[1]: Reached target network-pre.target. Oct 2 20:05:36.762583 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:05:36.762706 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:05:36.762736 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:05:36.762763 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:05:36.762785 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:36Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:05:40.109384 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:40Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:40.109689 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:40Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:40.109809 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:40Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:40.110064 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:40Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:40.110115 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:40Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:05:41.250721 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:05:40.110175 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T20:05:40Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:05:41.254004 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:05:41.263077 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:05:41.266827 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:05:41.270035 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:05:41.271485 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:05:41.273305 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:05:41.274981 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:05:41.276747 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:41.281590 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:05:41.283219 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:05:41.309656 systemd-journald[1405]: Time spent on flushing to /var/log/journal/ec2cf7ca3290bb3606723d2e81600cf2 is 118.404ms for 1206 entries. Oct 2 20:05:41.309656 systemd-journald[1405]: System Journal (/var/log/journal/ec2cf7ca3290bb3606723d2e81600cf2) is 8.0M, max 195.6M, 187.6M free. Oct 2 20:05:41.457074 systemd-journald[1405]: Received client request to flush runtime journal. Oct 2 20:05:41.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.331578 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:05:41.457673 udevadm[1438]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 20:05:41.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.334484 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:05:41.380169 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:41.397552 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:41.401619 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:05:41.436378 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:05:41.439908 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:05:41.458181 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:05:41.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:41.540064 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:05:41.544264 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:05:41.611693 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:05:41.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:42.324705 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:05:42.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:42.328000 audit: BPF prog-id=21 op=LOAD Oct 2 20:05:42.328000 audit: BPF prog-id=22 op=LOAD Oct 2 20:05:42.328000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:05:42.328000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:05:42.330258 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:42.355822 systemd-udevd[1444]: Using default interface naming scheme 'v252'. Oct 2 20:05:42.408289 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:42.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:42.410000 audit: BPF prog-id=23 op=LOAD Oct 2 20:05:42.412141 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:42.424000 audit: BPF prog-id=24 op=LOAD Oct 2 20:05:42.424000 audit: BPF prog-id=25 op=LOAD Oct 2 20:05:42.424000 audit: BPF prog-id=26 op=LOAD Oct 2 20:05:42.426232 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:05:42.498724 systemd[1]: Started systemd-userdbd.service. Oct 2 20:05:42.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:42.501537 (udev-worker)[1450]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:42.510892 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:05:42.610067 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 20:05:42.664056 systemd-networkd[1453]: lo: Link UP Oct 2 20:05:42.664071 systemd-networkd[1453]: lo: Gained carrier Oct 2 20:05:42.664679 systemd-networkd[1453]: Enumeration completed Oct 2 20:05:42.664802 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:42.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:42.666040 systemd-networkd[1453]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:42.669432 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:05:42.678557 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:05:42.679965 systemd-networkd[1453]: eth0: Link UP Oct 2 20:05:42.680222 systemd-networkd[1453]: eth0: Gained carrier Oct 2 20:05:42.686535 kernel: ACPI: button: Power Button [PWRF] Oct 2 20:05:42.698889 systemd-networkd[1453]: eth0: DHCPv4 address 172.31.26.158/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:42.719216 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 Oct 2 20:05:42.621000 audit[1452]: AVC avc: denied { confidentiality } for pid=1452 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:05:42.621000 audit[1452]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55df9466c930 a1=32194 a2=7f65f9989bc5 a3=5 items=106 ppid=1444 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:42.621000 audit: CWD cwd="/" Oct 2 20:05:42.621000 audit: PATH item=0 name=(null) inode=13148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=1 name=(null) inode=13149 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=2 name=(null) inode=13148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=3 name=(null) inode=13150 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=4 name=(null) inode=13148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=5 name=(null) inode=13151 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=6 name=(null) inode=13151 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=7 name=(null) inode=13152 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=8 name=(null) inode=13151 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=9 name=(null) inode=13153 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=10 name=(null) inode=13151 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=11 name=(null) inode=13154 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=12 name=(null) inode=13151 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=13 name=(null) inode=13155 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=14 name=(null) inode=13151 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=15 name=(null) inode=13156 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=16 name=(null) inode=13148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=17 name=(null) inode=13157 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=18 name=(null) inode=13157 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=19 name=(null) inode=13158 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=20 name=(null) inode=13157 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=21 name=(null) inode=13159 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=22 name=(null) inode=13157 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=23 name=(null) inode=13160 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=24 name=(null) inode=13157 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=25 name=(null) inode=13161 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=26 name=(null) inode=13157 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=27 name=(null) inode=13162 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=28 name=(null) inode=13148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=29 name=(null) inode=13163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=30 name=(null) inode=13163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=31 name=(null) inode=13164 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=32 name=(null) inode=13163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=33 name=(null) inode=13165 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=34 name=(null) inode=13163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=35 name=(null) inode=13166 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=36 name=(null) inode=13163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=37 name=(null) inode=13167 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=38 name=(null) inode=13163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=39 name=(null) inode=13168 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=40 name=(null) inode=13148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=41 name=(null) inode=13169 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=42 name=(null) inode=13169 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=43 name=(null) inode=13170 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=44 name=(null) inode=13169 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=45 name=(null) inode=13171 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=46 name=(null) inode=13169 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=47 name=(null) inode=13172 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=48 name=(null) inode=13169 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=49 name=(null) inode=13173 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=50 name=(null) inode=13169 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=51 name=(null) inode=13174 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=52 name=(null) inode=40 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=53 name=(null) inode=13175 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=54 name=(null) inode=13175 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=55 name=(null) inode=13176 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=56 name=(null) inode=13175 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=57 name=(null) inode=13177 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=58 name=(null) inode=13175 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=59 name=(null) inode=13178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=60 name=(null) inode=13178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=61 name=(null) inode=13179 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=62 name=(null) inode=13178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=63 name=(null) inode=13180 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=64 name=(null) inode=13178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=65 name=(null) inode=13181 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=66 name=(null) inode=13178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=67 name=(null) inode=13182 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=68 name=(null) inode=13178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=69 name=(null) inode=13183 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=70 name=(null) inode=13175 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=71 name=(null) inode=13184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=72 name=(null) inode=13184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=73 name=(null) inode=13185 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=74 name=(null) inode=13184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=75 name=(null) inode=13186 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=76 name=(null) inode=13184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=77 name=(null) inode=13187 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=78 name=(null) inode=13184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=79 name=(null) inode=13188 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=80 name=(null) inode=13184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=81 name=(null) inode=13189 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=82 name=(null) inode=13175 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=83 name=(null) inode=13190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=84 name=(null) inode=13190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=85 name=(null) inode=13191 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=86 name=(null) inode=13190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.732543 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 20:05:42.621000 audit: PATH item=87 name=(null) inode=13192 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=88 name=(null) inode=13190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=89 name=(null) inode=13193 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=90 name=(null) inode=13190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=91 name=(null) inode=13194 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=92 name=(null) inode=13190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=93 name=(null) inode=13195 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=94 name=(null) inode=13175 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=95 name=(null) inode=13196 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=96 name=(null) inode=13196 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=97 name=(null) inode=13197 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=98 name=(null) inode=13196 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=99 name=(null) inode=13198 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=100 name=(null) inode=13196 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=101 name=(null) inode=13199 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=102 name=(null) inode=13196 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=103 name=(null) inode=13200 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=104 name=(null) inode=13196 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PATH item=105 name=(null) inode=13201 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:42.621000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:05:42.749543 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 20:05:42.775540 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input5 Oct 2 20:05:42.781541 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:05:42.820540 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1448) Oct 2 20:05:42.937359 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:43.001084 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:05:43.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.006443 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:05:43.050759 lvm[1558]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:43.077710 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:05:43.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.079169 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:43.081813 systemd[1]: Starting lvm2-activation.service... Oct 2 20:05:43.088824 lvm[1559]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:43.118358 systemd[1]: Finished lvm2-activation.service. Oct 2 20:05:43.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.119751 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:43.121196 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:05:43.121231 systemd[1]: Reached target local-fs.target. Oct 2 20:05:43.124105 systemd[1]: Reached target machines.target. Oct 2 20:05:43.126800 systemd[1]: Starting ldconfig.service... Oct 2 20:05:43.129839 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:05:43.129936 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:43.133074 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:05:43.137298 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:05:43.140560 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:05:43.143634 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:43.143835 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:43.148201 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:05:43.162231 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1561 (bootctl) Oct 2 20:05:43.164877 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:05:43.189099 systemd-tmpfiles[1564]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:05:43.191659 systemd-tmpfiles[1564]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:05:43.195213 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:05:43.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.199758 systemd-tmpfiles[1564]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:05:43.316553 systemd-fsck[1570]: fsck.fat 4.2 (2021-01-31) Oct 2 20:05:43.316553 systemd-fsck[1570]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 20:05:43.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.320639 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:05:43.325132 systemd[1]: Mounting boot.mount... Oct 2 20:05:43.347166 systemd[1]: Mounted boot.mount. Oct 2 20:05:43.387845 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:05:43.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.477933 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:05:43.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.481272 systemd[1]: Starting audit-rules.service... Oct 2 20:05:43.484177 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:05:43.489222 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:05:43.493000 audit: BPF prog-id=27 op=LOAD Oct 2 20:05:43.495776 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:43.501000 audit: BPF prog-id=28 op=LOAD Oct 2 20:05:43.503196 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:05:43.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.509108 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:05:43.511154 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:05:43.513250 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:05:43.516000 audit[1590]: SYSTEM_BOOT pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.525769 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:05:43.614629 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:05:43.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:43.626000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:05:43.626000 audit[1604]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc5cc99870 a2=420 a3=0 items=0 ppid=1584 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:43.626000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:05:43.628727 augenrules[1604]: No rules Oct 2 20:05:43.629472 systemd[1]: Finished audit-rules.service. Oct 2 20:05:43.665017 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:05:43.666785 systemd[1]: Reached target time-set.target. Oct 2 20:05:43.695390 systemd-resolved[1587]: Positive Trust Anchors: Oct 2 20:05:43.695732 systemd-resolved[1587]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:43.695818 systemd-resolved[1587]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:44.783395 systemd-timesyncd[1588]: Contacted time server 144.34.193.110:123 (0.flatcar.pool.ntp.org). Oct 2 20:05:44.783527 systemd-timesyncd[1588]: Initial clock synchronization to Mon 2023-10-02 20:05:44.782935 UTC. Oct 2 20:05:44.812102 systemd-resolved[1587]: Defaulting to hostname 'linux'. Oct 2 20:05:44.815008 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:44.816356 systemd[1]: Reached target network.target. Oct 2 20:05:44.818264 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:44.942391 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:05:44.943063 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:05:45.416510 systemd-networkd[1453]: eth0: Gained IPv6LL Oct 2 20:05:45.418756 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:05:45.421883 systemd[1]: Reached target network-online.target. Oct 2 20:05:45.492974 ldconfig[1560]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:05:45.499807 systemd[1]: Finished ldconfig.service. Oct 2 20:05:45.504287 systemd[1]: Starting systemd-update-done.service... Oct 2 20:05:45.512297 systemd[1]: Finished systemd-update-done.service. Oct 2 20:05:45.513817 systemd[1]: Reached target sysinit.target. Oct 2 20:05:45.514988 systemd[1]: Started motdgen.path. Oct 2 20:05:45.516076 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:05:45.517745 systemd[1]: Started logrotate.timer. Oct 2 20:05:45.518847 systemd[1]: Started mdadm.timer. Oct 2 20:05:45.520168 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:05:45.521558 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:05:45.521605 systemd[1]: Reached target paths.target. Oct 2 20:05:45.523192 systemd[1]: Reached target timers.target. Oct 2 20:05:45.524872 systemd[1]: Listening on dbus.socket. Oct 2 20:05:45.527672 systemd[1]: Starting docker.socket... Oct 2 20:05:45.532616 systemd[1]: Listening on sshd.socket. Oct 2 20:05:45.533919 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:45.535084 systemd[1]: Listening on docker.socket. Oct 2 20:05:45.536588 systemd[1]: Reached target sockets.target. Oct 2 20:05:45.537652 systemd[1]: Reached target basic.target. Oct 2 20:05:45.538926 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:45.538971 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:45.540794 systemd[1]: Started amazon-ssm-agent.service. Oct 2 20:05:45.543812 systemd[1]: Starting containerd.service... Oct 2 20:05:45.548187 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 20:05:45.551856 systemd[1]: Starting dbus.service... Oct 2 20:05:45.554625 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:05:45.559998 systemd[1]: Starting extend-filesystems.service... Oct 2 20:05:45.561317 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:05:45.563161 systemd[1]: Starting motdgen.service... Oct 2 20:05:45.566559 systemd[1]: Started nvidia.service. Oct 2 20:05:45.570480 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:05:45.575102 systemd[1]: Starting prepare-critools.service... Oct 2 20:05:45.581522 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:05:45.584778 systemd[1]: Starting sshd-keygen.service... Oct 2 20:05:45.592522 systemd[1]: Starting systemd-logind.service... Oct 2 20:05:45.593839 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:45.593913 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:05:45.598052 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:05:45.599550 systemd[1]: Starting update-engine.service... Oct 2 20:05:45.700446 jq[1620]: false Oct 2 20:05:45.700629 jq[1630]: true Oct 2 20:05:45.605316 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:05:45.654946 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:05:45.655231 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:05:45.697804 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:05:45.723152 tar[1634]: crictl Oct 2 20:05:45.698024 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:05:45.730141 tar[1633]: ./ Oct 2 20:05:45.730141 tar[1633]: ./loopback Oct 2 20:05:45.723229 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:05:45.723461 systemd[1]: Finished motdgen.service. Oct 2 20:05:45.829382 jq[1637]: true Oct 2 20:05:45.874181 extend-filesystems[1621]: Found nvme0n1 Oct 2 20:05:45.898556 extend-filesystems[1621]: Found nvme0n1p1 Oct 2 20:05:45.899831 extend-filesystems[1621]: Found nvme0n1p2 Oct 2 20:05:45.904354 extend-filesystems[1621]: Found nvme0n1p3 Oct 2 20:05:45.905685 extend-filesystems[1621]: Found usr Oct 2 20:05:45.910344 extend-filesystems[1621]: Found nvme0n1p4 Oct 2 20:05:45.910671 dbus-daemon[1619]: [system] SELinux support is enabled Oct 2 20:05:45.910871 systemd[1]: Started dbus.service. Oct 2 20:05:45.913115 extend-filesystems[1621]: Found nvme0n1p6 Oct 2 20:05:45.915641 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:05:45.915681 systemd[1]: Reached target system-config.target. Oct 2 20:05:45.916979 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:05:45.917006 systemd[1]: Reached target user-config.target. Oct 2 20:05:45.919726 extend-filesystems[1621]: Found nvme0n1p7 Oct 2 20:05:45.920964 extend-filesystems[1621]: Found nvme0n1p9 Oct 2 20:05:45.921972 extend-filesystems[1621]: Checking size of /dev/nvme0n1p9 Oct 2 20:05:45.980555 env[1635]: time="2023-10-02T20:05:45.980450549Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:05:45.981558 dbus-daemon[1619]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1453 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:45.982347 update_engine[1629]: I1002 20:05:45.981367 1629 main.cc:92] Flatcar Update Engine starting Oct 2 20:05:45.994433 tar[1633]: ./bandwidth Oct 2 20:05:46.014270 dbus-daemon[1619]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 20:05:46.027456 systemd[1]: Starting systemd-hostnamed.service... Oct 2 20:05:46.069017 update_engine[1629]: I1002 20:05:46.068981 1629 update_check_scheduler.cc:74] Next update check in 2m2s Oct 2 20:05:46.069921 systemd[1]: Started update-engine.service. Oct 2 20:05:46.074350 systemd[1]: Started locksmithd.service. Oct 2 20:05:46.084416 bash[1684]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:46.085184 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:05:46.098447 extend-filesystems[1621]: Resized partition /dev/nvme0n1p9 Oct 2 20:05:46.113038 amazon-ssm-agent[1616]: 2023/10/02 20:05:46 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 20:05:46.124192 env[1635]: time="2023-10-02T20:05:46.124129130Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:05:46.124385 extend-filesystems[1691]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 20:05:46.126279 env[1635]: time="2023-10-02T20:05:46.126229814Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:46.128399 env[1635]: time="2023-10-02T20:05:46.128353038Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:46.131317 env[1635]: time="2023-10-02T20:05:46.131280780Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:46.131759 env[1635]: time="2023-10-02T20:05:46.131729205Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:46.132450 env[1635]: time="2023-10-02T20:05:46.132424701Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:46.132572 env[1635]: time="2023-10-02T20:05:46.132555090Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:05:46.132635 env[1635]: time="2023-10-02T20:05:46.132623048Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:46.132798 env[1635]: time="2023-10-02T20:05:46.132781177Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:46.133155 env[1635]: time="2023-10-02T20:05:46.133135651Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:46.133465 env[1635]: time="2023-10-02T20:05:46.133440965Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:46.138436 env[1635]: time="2023-10-02T20:05:46.138400424Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:05:46.138668 env[1635]: time="2023-10-02T20:05:46.138649132Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:05:46.138746 env[1635]: time="2023-10-02T20:05:46.138734222Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:05:46.146970 amazon-ssm-agent[1616]: Initializing new seelog logger Oct 2 20:05:46.151889 amazon-ssm-agent[1616]: New Seelog Logger Creation Complete Oct 2 20:05:46.151889 amazon-ssm-agent[1616]: 2023/10/02 20:05:46 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:46.151889 amazon-ssm-agent[1616]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:46.159474 amazon-ssm-agent[1616]: 2023/10/02 20:05:46 processing appconfig overrides Oct 2 20:05:46.161967 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167377545Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167434674Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167474036Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167557359Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167578796Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167661772Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167683011Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167789366Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167893397Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167922460Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167945913Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.167983612Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.168180011Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:05:46.170000 env[1635]: time="2023-10-02T20:05:46.168434802Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169137913Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169218931Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169400194Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169663601Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169703878Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169723905Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169741918Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169774192Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169792599Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169808026Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169823798Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.170636 env[1635]: time="2023-10-02T20:05:46.169856545Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171249388Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171289995Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171311242Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171328543Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171350607Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171382572Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171406752Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:05:46.172359 env[1635]: time="2023-10-02T20:05:46.171452202Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:05:46.172744 env[1635]: time="2023-10-02T20:05:46.171818404Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:05:46.172744 env[1635]: time="2023-10-02T20:05:46.171903413Z" level=info msg="Connect containerd service" Oct 2 20:05:46.172744 env[1635]: time="2023-10-02T20:05:46.171970100Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:05:46.182864 env[1635]: time="2023-10-02T20:05:46.182269464Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:05:46.182864 env[1635]: time="2023-10-02T20:05:46.182426160Z" level=info msg="Start subscribing containerd event" Oct 2 20:05:46.182864 env[1635]: time="2023-10-02T20:05:46.182476203Z" level=info msg="Start recovering state" Oct 2 20:05:46.182864 env[1635]: time="2023-10-02T20:05:46.182549971Z" level=info msg="Start event monitor" Oct 2 20:05:46.182864 env[1635]: time="2023-10-02T20:05:46.182563759Z" level=info msg="Start snapshots syncer" Oct 2 20:05:46.182864 env[1635]: time="2023-10-02T20:05:46.182575553Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:05:46.182864 env[1635]: time="2023-10-02T20:05:46.182584857Z" level=info msg="Start streaming server" Oct 2 20:05:46.185359 env[1635]: time="2023-10-02T20:05:46.185324734Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:05:46.187234 env[1635]: time="2023-10-02T20:05:46.187204297Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:05:46.187656 systemd[1]: Started containerd.service. Oct 2 20:05:46.241374 tar[1633]: ./ptp Oct 2 20:05:46.250164 env[1635]: time="2023-10-02T20:05:46.250101976Z" level=info msg="containerd successfully booted in 0.289045s" Oct 2 20:05:46.280720 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 20:05:46.315310 extend-filesystems[1691]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 20:05:46.315310 extend-filesystems[1691]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 20:05:46.315310 extend-filesystems[1691]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 20:05:46.328433 extend-filesystems[1621]: Resized filesystem in /dev/nvme0n1p9 Oct 2 20:05:46.317541 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:05:46.317754 systemd[1]: Finished extend-filesystems.service. Oct 2 20:05:46.366869 tar[1633]: ./vlan Oct 2 20:05:46.390940 systemd-logind[1628]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 20:05:46.390975 systemd-logind[1628]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 20:05:46.390999 systemd-logind[1628]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:05:46.394498 systemd-logind[1628]: New seat seat0. Oct 2 20:05:46.402611 systemd[1]: Started systemd-logind.service. Oct 2 20:05:46.439895 tar[1633]: ./host-device Oct 2 20:05:46.453221 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:05:46.500568 tar[1633]: ./tuning Oct 2 20:05:46.558365 dbus-daemon[1619]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 20:05:46.558539 systemd[1]: Started systemd-hostnamed.service. Oct 2 20:05:46.561635 dbus-daemon[1619]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1685 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:46.565439 systemd[1]: Starting polkit.service... Oct 2 20:05:46.597744 polkitd[1748]: Started polkitd version 121 Oct 2 20:05:46.627064 polkitd[1748]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 20:05:46.627158 polkitd[1748]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 20:05:46.628949 polkitd[1748]: Finished loading, compiling and executing 2 rules Oct 2 20:05:46.629567 dbus-daemon[1619]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 20:05:46.629753 systemd[1]: Started polkit.service. Oct 2 20:05:46.633187 polkitd[1748]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 20:05:46.645195 tar[1633]: ./vrf Oct 2 20:05:46.666268 systemd-hostnamed[1685]: Hostname set to (transient) Oct 2 20:05:46.666396 systemd-resolved[1587]: System hostname changed to 'ip-172-31-26-158'. Oct 2 20:05:46.761900 tar[1633]: ./sbr Oct 2 20:05:46.819538 coreos-metadata[1618]: Oct 02 20:05:46.818 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 20:05:46.835637 coreos-metadata[1618]: Oct 02 20:05:46.835 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 20:05:46.836665 coreos-metadata[1618]: Oct 02 20:05:46.836 INFO Fetch successful Oct 2 20:05:46.836929 coreos-metadata[1618]: Oct 02 20:05:46.836 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 20:05:46.837826 coreos-metadata[1618]: Oct 02 20:05:46.837 INFO Fetch successful Oct 2 20:05:46.847135 amazon-ssm-agent[1616]: 2023-10-02 20:05:46 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-084e47dd3de3f470d is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-084e47dd3de3f470d because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:05:46.847135 amazon-ssm-agent[1616]: status code: 400, request id: d5ddc877-0c7f-4c0d-a6a2-ade96a1e2e55 Oct 2 20:05:46.847135 amazon-ssm-agent[1616]: 2023-10-02 20:05:46 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 20:05:46.847466 unknown[1618]: wrote ssh authorized keys file for user: core Oct 2 20:05:46.886029 update-ssh-keys[1794]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:46.886404 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 20:05:46.895008 tar[1633]: ./tap Oct 2 20:05:46.996478 tar[1633]: ./dhcp Oct 2 20:05:47.197678 tar[1633]: ./static Oct 2 20:05:47.266845 tar[1633]: ./firewall Oct 2 20:05:47.365041 tar[1633]: ./macvlan Oct 2 20:05:47.456035 tar[1633]: ./dummy Oct 2 20:05:47.556455 tar[1633]: ./bridge Oct 2 20:05:47.575324 systemd[1]: Finished prepare-critools.service. Oct 2 20:05:47.633065 tar[1633]: ./ipvlan Oct 2 20:05:47.706755 tar[1633]: ./portmap Oct 2 20:05:47.764281 tar[1633]: ./host-local Oct 2 20:05:47.848703 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:05:47.944090 locksmithd[1686]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:05:48.883145 sshd_keygen[1651]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:05:48.944850 systemd[1]: Finished sshd-keygen.service. Oct 2 20:05:48.949527 systemd[1]: Starting issuegen.service... Oct 2 20:05:48.957174 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:05:48.957359 systemd[1]: Finished issuegen.service. Oct 2 20:05:48.961425 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:05:48.970786 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:05:48.975577 systemd[1]: Started getty@tty1.service. Oct 2 20:05:48.979753 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:05:48.981513 systemd[1]: Reached target getty.target. Oct 2 20:05:48.982948 systemd[1]: Reached target multi-user.target. Oct 2 20:05:48.986090 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:05:48.996360 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:05:48.996519 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:05:48.998225 systemd[1]: Startup finished in 883ms (kernel) + 17.334s (initrd) + 11.869s (userspace) = 30.086s. Oct 2 20:05:54.030710 systemd[1]: Created slice system-sshd.slice. Oct 2 20:05:54.032227 systemd[1]: Started sshd@0-172.31.26.158:22-139.178.89.65:48516.service. Oct 2 20:05:54.214283 sshd[1828]: Accepted publickey for core from 139.178.89.65 port 48516 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:54.216948 sshd[1828]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:54.232371 systemd[1]: Created slice user-500.slice. Oct 2 20:05:54.237879 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:05:54.243823 systemd-logind[1628]: New session 1 of user core. Oct 2 20:05:54.252520 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:05:54.254354 systemd[1]: Starting user@500.service... Oct 2 20:05:54.258638 (systemd)[1831]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:54.351968 systemd[1831]: Queued start job for default target default.target. Oct 2 20:05:54.352764 systemd[1831]: Reached target paths.target. Oct 2 20:05:54.352792 systemd[1831]: Reached target sockets.target. Oct 2 20:05:54.352805 systemd[1831]: Reached target timers.target. Oct 2 20:05:54.352817 systemd[1831]: Reached target basic.target. Oct 2 20:05:54.352929 systemd[1]: Started user@500.service. Oct 2 20:05:54.353833 systemd[1]: Started session-1.scope. Oct 2 20:05:54.354304 systemd[1831]: Reached target default.target. Oct 2 20:05:54.354449 systemd[1831]: Startup finished in 88ms. Oct 2 20:05:54.511418 systemd[1]: Started sshd@1-172.31.26.158:22-139.178.89.65:48524.service. Oct 2 20:05:54.687748 sshd[1840]: Accepted publickey for core from 139.178.89.65 port 48524 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:54.689855 sshd[1840]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:54.697366 systemd-logind[1628]: New session 2 of user core. Oct 2 20:05:54.697593 systemd[1]: Started session-2.scope. Oct 2 20:05:54.837305 sshd[1840]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:54.850810 systemd[1]: sshd@1-172.31.26.158:22-139.178.89.65:48524.service: Deactivated successfully. Oct 2 20:05:54.856616 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:05:54.861926 systemd-logind[1628]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:05:54.881082 systemd[1]: Started sshd@2-172.31.26.158:22-139.178.89.65:48540.service. Oct 2 20:05:54.886703 systemd-logind[1628]: Removed session 2. Oct 2 20:05:55.061161 sshd[1846]: Accepted publickey for core from 139.178.89.65 port 48540 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:55.062723 sshd[1846]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:55.073822 systemd-logind[1628]: New session 3 of user core. Oct 2 20:05:55.074522 systemd[1]: Started session-3.scope. Oct 2 20:05:55.201918 sshd[1846]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:55.204912 systemd[1]: sshd@2-172.31.26.158:22-139.178.89.65:48540.service: Deactivated successfully. Oct 2 20:05:55.209808 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:05:55.210541 systemd-logind[1628]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:05:55.211599 systemd-logind[1628]: Removed session 3. Oct 2 20:05:55.228193 systemd[1]: Started sshd@3-172.31.26.158:22-139.178.89.65:48556.service. Oct 2 20:05:55.399291 sshd[1852]: Accepted publickey for core from 139.178.89.65 port 48556 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:55.400908 sshd[1852]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:55.408774 systemd[1]: Started session-4.scope. Oct 2 20:05:55.409782 systemd-logind[1628]: New session 4 of user core. Oct 2 20:05:55.548121 sshd[1852]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:55.551721 systemd[1]: sshd@3-172.31.26.158:22-139.178.89.65:48556.service: Deactivated successfully. Oct 2 20:05:55.552821 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:05:55.553599 systemd-logind[1628]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:05:55.555294 systemd-logind[1628]: Removed session 4. Oct 2 20:05:55.589367 systemd[1]: Started sshd@4-172.31.26.158:22-139.178.89.65:48564.service. Oct 2 20:05:55.762917 sshd[1858]: Accepted publickey for core from 139.178.89.65 port 48564 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:55.764972 sshd[1858]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:55.770804 systemd[1]: Started session-5.scope. Oct 2 20:05:55.771494 systemd-logind[1628]: New session 5 of user core. Oct 2 20:05:55.908712 sudo[1861]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:05:55.909098 sudo[1861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:55.925494 dbus-daemon[1619]: \xd0-\xcf\xc1YU: received setenforce notice (enforcing=-18568960) Oct 2 20:05:55.927634 sudo[1861]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:55.952203 sshd[1858]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:55.956779 systemd[1]: sshd@4-172.31.26.158:22-139.178.89.65:48564.service: Deactivated successfully. Oct 2 20:05:55.957742 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:05:55.958517 systemd-logind[1628]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:05:55.959875 systemd-logind[1628]: Removed session 5. Oct 2 20:05:55.977022 systemd[1]: Started sshd@5-172.31.26.158:22-139.178.89.65:33216.service. Oct 2 20:05:56.149887 sshd[1865]: Accepted publickey for core from 139.178.89.65 port 33216 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:56.152093 sshd[1865]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:56.158016 systemd-logind[1628]: New session 6 of user core. Oct 2 20:05:56.159111 systemd[1]: Started session-6.scope. Oct 2 20:05:56.259851 sudo[1869]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:05:56.260144 sudo[1869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:56.263375 sudo[1869]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:56.268836 sudo[1868]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:05:56.269124 sudo[1868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:56.279987 systemd[1]: Stopping audit-rules.service... Oct 2 20:05:56.280000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:56.282854 kernel: kauditd_printk_skb: 182 callbacks suppressed Oct 2 20:05:56.282913 kernel: audit: type=1305 audit(1696277156.280:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:56.280000 audit[1872]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffda7a49010 a2=420 a3=0 items=0 ppid=1 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:56.286526 auditctl[1872]: No rules Oct 2 20:05:56.287254 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:05:56.287513 systemd[1]: Stopped audit-rules.service. Oct 2 20:05:56.292873 kernel: audit: type=1300 audit(1696277156.280:163): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffda7a49010 a2=420 a3=0 items=0 ppid=1 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:56.289823 systemd[1]: Starting audit-rules.service... Oct 2 20:05:56.280000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:56.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.300760 kernel: audit: type=1327 audit(1696277156.280:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:56.300890 kernel: audit: type=1131 audit(1696277156.285:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.315644 augenrules[1889]: No rules Oct 2 20:05:56.316522 systemd[1]: Finished audit-rules.service. Oct 2 20:05:56.324289 kernel: audit: type=1130 audit(1696277156.315:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.324409 kernel: audit: type=1106 audit(1696277156.321:166): pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.321000 audit[1868]: USER_END pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.322795 sudo[1868]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:56.321000 audit[1868]: CRED_DISP pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.333732 kernel: audit: type=1104 audit(1696277156.321:167): pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.345082 sshd[1865]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:56.345000 audit[1865]: USER_END pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.348772 systemd[1]: sshd@5-172.31.26.158:22-139.178.89.65:33216.service: Deactivated successfully. Oct 2 20:05:56.349664 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:05:56.351367 systemd-logind[1628]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:05:56.352712 systemd-logind[1628]: Removed session 6. Oct 2 20:05:56.345000 audit[1865]: CRED_DISP pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.359577 kernel: audit: type=1106 audit(1696277156.345:168): pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.360031 kernel: audit: type=1104 audit(1696277156.345:169): pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.360059 kernel: audit: type=1131 audit(1696277156.346:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.26.158:22-139.178.89.65:33216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.26.158:22-139.178.89.65:33216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.370678 systemd[1]: Started sshd@6-172.31.26.158:22-139.178.89.65:33226.service. Oct 2 20:05:56.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.158:22-139.178.89.65:33226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.531000 audit[1895]: USER_ACCT pid=1895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.532000 audit[1895]: CRED_ACQ pid=1895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.532000 audit[1895]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2181c830 a2=3 a3=0 items=0 ppid=1 pid=1895 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:56.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:05:56.534778 sshd[1895]: Accepted publickey for core from 139.178.89.65 port 33226 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:56.534600 sshd[1895]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:56.540088 systemd[1]: Started session-7.scope. Oct 2 20:05:56.540598 systemd-logind[1628]: New session 7 of user core. Oct 2 20:05:56.544000 audit[1895]: USER_START pid=1895 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.546000 audit[1897]: CRED_ACQ pid=1897 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:56.642000 audit[1898]: USER_ACCT pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.643742 sudo[1898]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:05:56.642000 audit[1898]: CRED_REFR pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:56.644158 sudo[1898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:56.644000 audit[1898]: USER_START pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:57.272691 systemd[1]: Starting docker.service... Oct 2 20:05:57.339403 env[1913]: time="2023-10-02T20:05:57.339177453Z" level=info msg="Starting up" Oct 2 20:05:57.340858 env[1913]: time="2023-10-02T20:05:57.340835198Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:57.340953 env[1913]: time="2023-10-02T20:05:57.340942391Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:57.341024 env[1913]: time="2023-10-02T20:05:57.341012720Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:57.341065 env[1913]: time="2023-10-02T20:05:57.341057578Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:57.342882 env[1913]: time="2023-10-02T20:05:57.342859091Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:57.342973 env[1913]: time="2023-10-02T20:05:57.342962314Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:57.343026 env[1913]: time="2023-10-02T20:05:57.343016006Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:57.343081 env[1913]: time="2023-10-02T20:05:57.343072472Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:57.350226 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2966783949-merged.mount: Deactivated successfully. Oct 2 20:05:57.393504 env[1913]: time="2023-10-02T20:05:57.393471194Z" level=info msg="Loading containers: start." Oct 2 20:05:57.469000 audit[1944]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.469000 audit[1944]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffff75224a0 a2=0 a3=7ffff752248c items=0 ppid=1913 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.469000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:05:57.472000 audit[1946]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.472000 audit[1946]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffce3928040 a2=0 a3=7ffce392802c items=0 ppid=1913 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.472000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:05:57.474000 audit[1948]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.474000 audit[1948]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffeb5bbd300 a2=0 a3=7ffeb5bbd2ec items=0 ppid=1913 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.474000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:57.482000 audit[1950]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1950 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.482000 audit[1950]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe4a8b5470 a2=0 a3=7ffe4a8b545c items=0 ppid=1913 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.482000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:57.486000 audit[1952]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.486000 audit[1952]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe0e0b24c0 a2=0 a3=7ffe0e0b24ac items=0 ppid=1913 pid=1952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.486000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:05:57.504000 audit[1957]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.504000 audit[1957]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2514c900 a2=0 a3=7fff2514c8ec items=0 ppid=1913 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.504000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:05:57.516000 audit[1959]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.516000 audit[1959]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc1bbabbc0 a2=0 a3=7ffc1bbabbac items=0 ppid=1913 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.516000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:05:57.518000 audit[1961]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.518000 audit[1961]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffcad167dc0 a2=0 a3=7ffcad167dac items=0 ppid=1913 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.518000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:05:57.521000 audit[1963]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.521000 audit[1963]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff4124a480 a2=0 a3=7fff4124a46c items=0 ppid=1913 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.521000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:57.536000 audit[1967]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.536000 audit[1967]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffee8ec52b0 a2=0 a3=7ffee8ec529c items=0 ppid=1913 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.536000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:57.539000 audit[1968]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.539000 audit[1968]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffaf06b7a0 a2=0 a3=7fffaf06b78c items=0 ppid=1913 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.539000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:57.558279 kernel: Initializing XFRM netlink socket Oct 2 20:05:57.624707 env[1913]: time="2023-10-02T20:05:57.624665324Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:05:57.625826 (udev-worker)[1923]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:57.670000 audit[1976]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.670000 audit[1976]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffddc6f6c40 a2=0 a3=7ffddc6f6c2c items=0 ppid=1913 pid=1976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.670000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:05:57.747000 audit[1979]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1979 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.747000 audit[1979]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff1dcd3390 a2=0 a3=7fff1dcd337c items=0 ppid=1913 pid=1979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:05:57.751000 audit[1982]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.751000 audit[1982]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffde8d5f850 a2=0 a3=7ffde8d5f83c items=0 ppid=1913 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.751000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:57.753000 audit[1984]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.753000 audit[1984]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd26991c90 a2=0 a3=7ffd26991c7c items=0 ppid=1913 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.753000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:57.756000 audit[1986]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.756000 audit[1986]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fffd4a984f0 a2=0 a3=7fffd4a984dc items=0 ppid=1913 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.756000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:05:57.758000 audit[1988]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.758000 audit[1988]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff33999ba0 a2=0 a3=7fff33999b8c items=0 ppid=1913 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.758000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:05:57.761000 audit[1990]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1990 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.761000 audit[1990]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff30a4fed0 a2=0 a3=7fff30a4febc items=0 ppid=1913 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.761000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:05:57.771000 audit[1993]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.771000 audit[1993]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffec3a3c010 a2=0 a3=7ffec3a3bffc items=0 ppid=1913 pid=1993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.771000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:05:57.774000 audit[1995]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.774000 audit[1995]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd1f67a430 a2=0 a3=7ffd1f67a41c items=0 ppid=1913 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.774000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:57.777000 audit[1997]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.777000 audit[1997]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffffe7e33c0 a2=0 a3=7ffffe7e33ac items=0 ppid=1913 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.777000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:57.779000 audit[1999]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.779000 audit[1999]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc01a6fff0 a2=0 a3=7ffc01a6ffdc items=0 ppid=1913 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.779000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:05:57.781570 systemd-networkd[1453]: docker0: Link UP Oct 2 20:05:57.794000 audit[2003]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.794000 audit[2003]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb8380500 a2=0 a3=7fffb83804ec items=0 ppid=1913 pid=2003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.794000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:57.797000 audit[2004]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:57.797000 audit[2004]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdb1c88020 a2=0 a3=7ffdb1c8800c items=0 ppid=1913 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:57.797000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:57.798908 env[1913]: time="2023-10-02T20:05:57.798875925Z" level=info msg="Loading containers: done." Oct 2 20:05:57.812848 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2010486631-merged.mount: Deactivated successfully. Oct 2 20:05:57.837706 env[1913]: time="2023-10-02T20:05:57.837640420Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:05:57.838002 env[1913]: time="2023-10-02T20:05:57.837887442Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:05:57.838138 env[1913]: time="2023-10-02T20:05:57.838107631Z" level=info msg="Daemon has completed initialization" Oct 2 20:05:57.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:57.864414 systemd[1]: Started docker.service. Oct 2 20:05:57.874021 env[1913]: time="2023-10-02T20:05:57.873961152Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:05:57.899017 systemd[1]: Reloading. Oct 2 20:05:58.033144 /usr/lib/systemd/system-generators/torcx-generator[2050]: time="2023-10-02T20:05:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:58.033185 /usr/lib/systemd/system-generators/torcx-generator[2050]: time="2023-10-02T20:05:58Z" level=info msg="torcx already run" Oct 2 20:05:58.156103 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:58.156127 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:58.181627 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.275000 audit: BPF prog-id=37 op=LOAD Oct 2 20:05:58.275000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit: BPF prog-id=38 op=LOAD Oct 2 20:05:58.277000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit: BPF prog-id=39 op=LOAD Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.277000 audit: BPF prog-id=40 op=LOAD Oct 2 20:05:58.277000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:05:58.277000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit: BPF prog-id=41 op=LOAD Oct 2 20:05:58.278000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit: BPF prog-id=42 op=LOAD Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit: BPF prog-id=43 op=LOAD Oct 2 20:05:58.279000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:05:58.279000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.279000 audit: BPF prog-id=44 op=LOAD Oct 2 20:05:58.280000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit: BPF prog-id=45 op=LOAD Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.280000 audit: BPF prog-id=46 op=LOAD Oct 2 20:05:58.280000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:05:58.280000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit: BPF prog-id=47 op=LOAD Oct 2 20:05:58.282000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit: BPF prog-id=48 op=LOAD Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.282000 audit: BPF prog-id=49 op=LOAD Oct 2 20:05:58.282000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:05:58.282000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.290000 audit: BPF prog-id=50 op=LOAD Oct 2 20:05:58.290000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit: BPF prog-id=51 op=LOAD Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.298000 audit: BPF prog-id=52 op=LOAD Oct 2 20:05:58.298000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:05:58.298000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.300000 audit: BPF prog-id=53 op=LOAD Oct 2 20:05:58.300000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:58.304000 audit: BPF prog-id=54 op=LOAD Oct 2 20:05:58.304000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:05:58.318991 systemd[1]: Started kubelet.service. Oct 2 20:05:58.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:58.465302 kubelet[2102]: E1002 20:05:58.460025 2102 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:05:58.471558 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:05:58.471732 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:05:58.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:05:59.023110 env[1635]: time="2023-10-02T20:05:59.022968543Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 20:05:59.768780 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2229592657.mount: Deactivated successfully. Oct 2 20:06:04.365481 env[1635]: time="2023-10-02T20:06:04.365402697Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.374318 env[1635]: time="2023-10-02T20:06:04.374267673Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.379605 env[1635]: time="2023-10-02T20:06:04.379431047Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.382550 env[1635]: time="2023-10-02T20:06:04.382503536Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.383592 env[1635]: time="2023-10-02T20:06:04.383545451Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 20:06:04.396413 env[1635]: time="2023-10-02T20:06:04.396381154Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 20:06:08.175399 env[1635]: time="2023-10-02T20:06:08.175261917Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:08.180656 env[1635]: time="2023-10-02T20:06:08.180599771Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:08.184273 env[1635]: time="2023-10-02T20:06:08.184207978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:08.186710 env[1635]: time="2023-10-02T20:06:08.186662454Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:08.187915 env[1635]: time="2023-10-02T20:06:08.187876101Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 20:06:08.199928 env[1635]: time="2023-10-02T20:06:08.199883725Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 20:06:08.722640 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:06:08.730197 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 20:06:08.730313 kernel: audit: type=1130 audit(1696277168.721:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:08.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:08.722911 systemd[1]: Stopped kubelet.service. Oct 2 20:06:08.725023 systemd[1]: Started kubelet.service. Oct 2 20:06:08.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:08.744970 kernel: audit: type=1131 audit(1696277168.721:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:08.745112 kernel: audit: type=1130 audit(1696277168.723:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:08.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:08.792467 kubelet[2128]: E1002 20:06:08.792421 2128 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:06:08.797464 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:08.797698 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:08.804914 kernel: audit: type=1131 audit(1696277168.796:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:08.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:10.325867 env[1635]: time="2023-10-02T20:06:10.325812726Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:10.329204 env[1635]: time="2023-10-02T20:06:10.329163696Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:10.331684 env[1635]: time="2023-10-02T20:06:10.331646178Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:10.334269 env[1635]: time="2023-10-02T20:06:10.334217318Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:10.336420 env[1635]: time="2023-10-02T20:06:10.336376433Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 20:06:10.354455 env[1635]: time="2023-10-02T20:06:10.354399785Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 20:06:11.755155 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2921657874.mount: Deactivated successfully. Oct 2 20:06:12.479651 env[1635]: time="2023-10-02T20:06:12.479604732Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.484746 env[1635]: time="2023-10-02T20:06:12.484701030Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.486980 env[1635]: time="2023-10-02T20:06:12.486924296Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.489673 env[1635]: time="2023-10-02T20:06:12.489493667Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.490021 env[1635]: time="2023-10-02T20:06:12.489978815Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 20:06:12.501214 env[1635]: time="2023-10-02T20:06:12.501167241Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:06:13.021053 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount280223263.mount: Deactivated successfully. Oct 2 20:06:13.030347 env[1635]: time="2023-10-02T20:06:13.030298290Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.033600 env[1635]: time="2023-10-02T20:06:13.033553754Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.036399 env[1635]: time="2023-10-02T20:06:13.036356835Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.038863 env[1635]: time="2023-10-02T20:06:13.038823719Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.039308 env[1635]: time="2023-10-02T20:06:13.039276282Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:06:13.053075 env[1635]: time="2023-10-02T20:06:13.053036933Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 20:06:13.961716 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3636674708.mount: Deactivated successfully. Oct 2 20:06:16.680400 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 20:06:16.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.686260 kernel: audit: type=1131 audit(1696277176.679:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.706493 kernel: audit: type=1334 audit(1696277176.700:418): prog-id=46 op=UNLOAD Oct 2 20:06:16.706647 kernel: audit: type=1334 audit(1696277176.700:419): prog-id=45 op=UNLOAD Oct 2 20:06:16.706685 kernel: audit: type=1334 audit(1696277176.700:420): prog-id=44 op=UNLOAD Oct 2 20:06:16.700000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:06:16.700000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:06:16.700000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:06:18.886622 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:06:18.887164 systemd[1]: Stopped kubelet.service. Oct 2 20:06:18.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:18.900365 kernel: audit: type=1130 audit(1696277178.885:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:18.900520 systemd[1]: Started kubelet.service. Oct 2 20:06:18.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:18.912325 kernel: audit: type=1131 audit(1696277178.885:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:18.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:18.923313 kernel: audit: type=1130 audit(1696277178.904:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:19.046120 kubelet[2157]: E1002 20:06:19.046072 2157 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:06:19.049934 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:19.050180 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:19.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:19.056265 kernel: audit: type=1131 audit(1696277179.049:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:20.571703 env[1635]: time="2023-10-02T20:06:20.571653173Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:20.590378 env[1635]: time="2023-10-02T20:06:20.590327923Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:20.604330 env[1635]: time="2023-10-02T20:06:20.604281756Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:20.618733 env[1635]: time="2023-10-02T20:06:20.618683723Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:20.619503 env[1635]: time="2023-10-02T20:06:20.619462949Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 20:06:20.637013 env[1635]: time="2023-10-02T20:06:20.636969789Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:06:21.293524 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3002013822.mount: Deactivated successfully. Oct 2 20:06:22.608195 env[1635]: time="2023-10-02T20:06:22.608122830Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.611331 env[1635]: time="2023-10-02T20:06:22.611286132Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.615654 env[1635]: time="2023-10-02T20:06:22.615594538Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.620945 env[1635]: time="2023-10-02T20:06:22.620896554Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.623400 env[1635]: time="2023-10-02T20:06:22.623233292Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 20:06:26.354853 systemd[1]: Stopped kubelet.service. Oct 2 20:06:26.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.366571 kernel: audit: type=1130 audit(1696277186.354:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.366704 kernel: audit: type=1131 audit(1696277186.354:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.379298 systemd[1]: Reloading. Oct 2 20:06:26.484628 /usr/lib/systemd/system-generators/torcx-generator[2252]: time="2023-10-02T20:06:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:26.484668 /usr/lib/systemd/system-generators/torcx-generator[2252]: time="2023-10-02T20:06:26Z" level=info msg="torcx already run" Oct 2 20:06:26.595997 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:26.596023 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:26.619932 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758261 kernel: audit: type=1400 audit(1696277186.752:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.765263 kernel: audit: type=1400 audit(1696277186.752:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.765334 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:06:26.783934 kernel: audit: type=1400 audit(1696277186.752:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784083 kernel: audit: type=1400 audit(1696277186.752:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784142 kernel: audit: type=1400 audit(1696277186.752:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784187 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:06:26.784220 kernel: audit: backlog limit exceeded Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.756000 audit: BPF prog-id=55 op=LOAD Oct 2 20:06:26.756000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit: BPF prog-id=56 op=LOAD Oct 2 20:06:26.758000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit: BPF prog-id=57 op=LOAD Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.758000 audit: BPF prog-id=58 op=LOAD Oct 2 20:06:26.758000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:06:26.758000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit: BPF prog-id=59 op=LOAD Oct 2 20:06:26.763000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.763000 audit: BPF prog-id=60 op=LOAD Oct 2 20:06:26.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.782000 audit: BPF prog-id=62 op=LOAD Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.784000 audit: BPF prog-id=65 op=LOAD Oct 2 20:06:26.784000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit: BPF prog-id=66 op=LOAD Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit: BPF prog-id=67 op=LOAD Oct 2 20:06:26.787000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:06:26.787000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.788000 audit: BPF prog-id=68 op=LOAD Oct 2 20:06:26.788000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.791000 audit: BPF prog-id=69 op=LOAD Oct 2 20:06:26.791000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:06:26.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.813204 systemd[1]: Started kubelet.service. Oct 2 20:06:26.884482 kubelet[2304]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:26.884482 kubelet[2304]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:26.884482 kubelet[2304]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:26.884482 kubelet[2304]: I1002 20:06:26.880317 2304 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:27.549965 kubelet[2304]: I1002 20:06:27.549926 2304 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:06:27.549965 kubelet[2304]: I1002 20:06:27.549961 2304 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:27.550303 kubelet[2304]: I1002 20:06:27.550282 2304 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:06:27.556148 kubelet[2304]: E1002 20:06:27.556120 2304 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.26.158:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.556376 kubelet[2304]: I1002 20:06:27.556359 2304 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:27.558343 kubelet[2304]: I1002 20:06:27.558307 2304 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:27.558557 kubelet[2304]: I1002 20:06:27.558538 2304 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:27.558650 kubelet[2304]: I1002 20:06:27.558633 2304 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:06:27.558775 kubelet[2304]: I1002 20:06:27.558660 2304 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:06:27.558775 kubelet[2304]: I1002 20:06:27.558677 2304 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:06:27.558888 kubelet[2304]: I1002 20:06:27.558792 2304 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:27.562071 kubelet[2304]: I1002 20:06:27.562045 2304 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:06:27.562071 kubelet[2304]: I1002 20:06:27.562072 2304 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:27.562239 kubelet[2304]: I1002 20:06:27.562094 2304 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:06:27.562239 kubelet[2304]: I1002 20:06:27.562111 2304 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:27.564536 kubelet[2304]: W1002 20:06:27.564482 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.26.158:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.564654 kubelet[2304]: E1002 20:06:27.564547 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.26.158:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.564703 kubelet[2304]: I1002 20:06:27.564662 2304 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:27.565062 kubelet[2304]: W1002 20:06:27.565043 2304 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:06:27.565706 kubelet[2304]: I1002 20:06:27.565685 2304 server.go:1168] "Started kubelet" Oct 2 20:06:27.565895 kubelet[2304]: W1002 20:06:27.565852 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.26.158:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-158&limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.565970 kubelet[2304]: E1002 20:06:27.565911 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.26.158:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-158&limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.566000 audit[2304]: AVC avc: denied { mac_admin } for pid=2304 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.566000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:27.566000 audit[2304]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000853b30 a1=c000a4afd8 a2=c000853b00 a3=25 items=0 ppid=1 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.566000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:27.566000 audit[2304]: AVC avc: denied { mac_admin } for pid=2304 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.566000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:27.566000 audit[2304]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a51a40 a1=c000a4aff0 a2=c000853bc0 a3=25 items=0 ppid=1 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.566000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:27.568614 kubelet[2304]: I1002 20:06:27.568104 2304 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:27.568614 kubelet[2304]: I1002 20:06:27.568167 2304 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:27.568614 kubelet[2304]: I1002 20:06:27.568265 2304 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:27.570356 kubelet[2304]: E1002 20:06:27.570225 2304 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-26-158.178a631d657325c6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-26-158", UID:"ip-172-31-26-158", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-26-158"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 6, 27, 565659590, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 6, 27, 565659590, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.26.158:6443/api/v1/namespaces/default/events": dial tcp 172.31.26.158:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:06:27.571129 kubelet[2304]: E1002 20:06:27.571109 2304 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:27.571266 kubelet[2304]: E1002 20:06:27.571238 2304 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:27.573356 kubelet[2304]: I1002 20:06:27.573337 2304 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:27.574215 kubelet[2304]: I1002 20:06:27.574192 2304 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:06:27.575939 kubelet[2304]: I1002 20:06:27.575915 2304 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:06:27.578000 audit[2314]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.578000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe16e871e0 a2=0 a3=7ffe16e871cc items=0 ppid=2304 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.578000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:27.581094 kubelet[2304]: I1002 20:06:27.581058 2304 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:06:27.581000 audit[2315]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.581000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffddfbd9920 a2=0 a3=7ffddfbd990c items=0 ppid=2304 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:27.585155 kubelet[2304]: W1002 20:06:27.585057 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.26.158:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.585341 kubelet[2304]: E1002 20:06:27.585156 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.26.158:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.588188 kubelet[2304]: E1002 20:06:27.588049 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.158:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-158?timeout=10s\": dial tcp 172.31.26.158:6443: connect: connection refused" interval="200ms" Oct 2 20:06:27.596000 audit[2317]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.596000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff847b94d0 a2=0 a3=7fff847b94bc items=0 ppid=2304 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.596000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:27.600180 kubelet[2304]: I1002 20:06:27.600147 2304 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:06:27.605000 audit[2319]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.605000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcf133c280 a2=0 a3=7ffcf133c26c items=0 ppid=2304 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.605000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:27.626000 audit[2323]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.626000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd0c675920 a2=0 a3=7ffd0c67590c items=0 ppid=2304 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.626000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:06:27.629706 kubelet[2304]: I1002 20:06:27.629682 2304 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:06:27.630724 kubelet[2304]: I1002 20:06:27.630695 2304 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:06:27.630724 kubelet[2304]: I1002 20:06:27.630718 2304 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:27.630944 kubelet[2304]: I1002 20:06:27.630743 2304 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:27.630000 audit[2328]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:27.630000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe3a75ce60 a2=0 a3=7ffe3a75ce4c items=0 ppid=2304 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.630000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:27.631000 audit[2329]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.631000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcda389e20 a2=0 a3=7ffcda389e0c items=0 ppid=2304 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.631000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:27.633080 kubelet[2304]: I1002 20:06:27.632361 2304 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:06:27.633080 kubelet[2304]: I1002 20:06:27.632395 2304 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:06:27.633080 kubelet[2304]: I1002 20:06:27.632423 2304 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:06:27.633080 kubelet[2304]: E1002 20:06:27.632485 2304 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:06:27.633957 kubelet[2304]: I1002 20:06:27.633937 2304 policy_none.go:49] "None policy: Start" Oct 2 20:06:27.634323 kubelet[2304]: W1002 20:06:27.634301 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.26.158:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.634473 kubelet[2304]: E1002 20:06:27.634462 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.26.158:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:27.635149 kubelet[2304]: I1002 20:06:27.635133 2304 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:06:27.633000 audit[2330]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.633000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd17e3ef10 a2=0 a3=7ffd17e3eefc items=0 ppid=2304 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.633000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:27.635531 kubelet[2304]: I1002 20:06:27.635517 2304 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:27.635000 audit[2331]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:27.635000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe7bc69ff0 a2=0 a3=7ffe7bc69fdc items=0 ppid=2304 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.635000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:27.636000 audit[2332]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:27.636000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc48d2eee0 a2=0 a3=7ffc48d2eecc items=0 ppid=2304 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.636000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:27.637000 audit[2333]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:27.637000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdcae63ec0 a2=0 a3=7ffdcae63eac items=0 ppid=2304 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:27.639000 audit[2334]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:27.639000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe3a1a2b10 a2=0 a3=7ffe3a1a2afc items=0 ppid=2304 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.639000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:27.645077 systemd[1]: Created slice kubepods.slice. Oct 2 20:06:27.650225 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:06:27.654170 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:06:27.665269 kubelet[2304]: I1002 20:06:27.665223 2304 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:27.664000 audit[2304]: AVC avc: denied { mac_admin } for pid=2304 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.664000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:27.664000 audit[2304]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000be3f50 a1=c000be0c90 a2=c000be3f20 a3=25 items=0 ppid=1 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.664000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:27.666166 kubelet[2304]: I1002 20:06:27.666134 2304 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:27.667045 kubelet[2304]: I1002 20:06:27.666475 2304 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:27.667538 kubelet[2304]: E1002 20:06:27.667516 2304 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-26-158\" not found" Oct 2 20:06:27.677354 kubelet[2304]: I1002 20:06:27.677301 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-158" Oct 2 20:06:27.677913 kubelet[2304]: E1002 20:06:27.677885 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.158:6443/api/v1/nodes\": dial tcp 172.31.26.158:6443: connect: connection refused" node="ip-172-31-26-158" Oct 2 20:06:27.733265 kubelet[2304]: I1002 20:06:27.733209 2304 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:27.734923 kubelet[2304]: I1002 20:06:27.734900 2304 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:27.736372 kubelet[2304]: I1002 20:06:27.736346 2304 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:27.743035 systemd[1]: Created slice kubepods-burstable-pod668a28bbf6f96aa2b9f655bfcadae65c.slice. Oct 2 20:06:27.752912 systemd[1]: Created slice kubepods-burstable-pod3f25c09e1ae82ad433cb1bddcca9e8a8.slice. Oct 2 20:06:27.763150 systemd[1]: Created slice kubepods-burstable-pod3324526c400c34fa95dd1a1aa60de1dd.slice. Oct 2 20:06:27.789510 kubelet[2304]: E1002 20:06:27.789476 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.158:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-158?timeout=10s\": dial tcp 172.31.26.158:6443: connect: connection refused" interval="400ms" Oct 2 20:06:27.878027 kubelet[2304]: I1002 20:06:27.877888 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/668a28bbf6f96aa2b9f655bfcadae65c-k8s-certs\") pod \"kube-apiserver-ip-172-31-26-158\" (UID: \"668a28bbf6f96aa2b9f655bfcadae65c\") " pod="kube-system/kube-apiserver-ip-172-31-26-158" Oct 2 20:06:27.878027 kubelet[2304]: I1002 20:06:27.877951 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/668a28bbf6f96aa2b9f655bfcadae65c-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-26-158\" (UID: \"668a28bbf6f96aa2b9f655bfcadae65c\") " pod="kube-system/kube-apiserver-ip-172-31-26-158" Oct 2 20:06:27.878027 kubelet[2304]: I1002 20:06:27.878005 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-ca-certs\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:27.881640 kubelet[2304]: I1002 20:06:27.881612 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:27.882010 kubelet[2304]: I1002 20:06:27.881885 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-k8s-certs\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:27.882322 kubelet[2304]: I1002 20:06:27.882275 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/668a28bbf6f96aa2b9f655bfcadae65c-ca-certs\") pod \"kube-apiserver-ip-172-31-26-158\" (UID: \"668a28bbf6f96aa2b9f655bfcadae65c\") " pod="kube-system/kube-apiserver-ip-172-31-26-158" Oct 2 20:06:27.882648 kubelet[2304]: I1002 20:06:27.882632 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-kubeconfig\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:27.882998 kubelet[2304]: I1002 20:06:27.882985 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:27.883318 kubelet[2304]: I1002 20:06:27.883305 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3324526c400c34fa95dd1a1aa60de1dd-kubeconfig\") pod \"kube-scheduler-ip-172-31-26-158\" (UID: \"3324526c400c34fa95dd1a1aa60de1dd\") " pod="kube-system/kube-scheduler-ip-172-31-26-158" Oct 2 20:06:27.883447 kubelet[2304]: I1002 20:06:27.880541 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-158" Oct 2 20:06:27.884043 kubelet[2304]: E1002 20:06:27.884028 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.158:6443/api/v1/nodes\": dial tcp 172.31.26.158:6443: connect: connection refused" node="ip-172-31-26-158" Oct 2 20:06:28.051775 env[1635]: time="2023-10-02T20:06:28.051723631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-26-158,Uid:668a28bbf6f96aa2b9f655bfcadae65c,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:28.057636 env[1635]: time="2023-10-02T20:06:28.057588168Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-26-158,Uid:3f25c09e1ae82ad433cb1bddcca9e8a8,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:28.066989 env[1635]: time="2023-10-02T20:06:28.066948087Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-26-158,Uid:3324526c400c34fa95dd1a1aa60de1dd,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:28.190409 kubelet[2304]: E1002 20:06:28.190372 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.158:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-158?timeout=10s\": dial tcp 172.31.26.158:6443: connect: connection refused" interval="800ms" Oct 2 20:06:28.286613 kubelet[2304]: I1002 20:06:28.286579 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-158" Oct 2 20:06:28.286971 kubelet[2304]: E1002 20:06:28.286946 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.158:6443/api/v1/nodes\": dial tcp 172.31.26.158:6443: connect: connection refused" node="ip-172-31-26-158" Oct 2 20:06:28.584332 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2098160146.mount: Deactivated successfully. Oct 2 20:06:28.638788 kubelet[2304]: W1002 20:06:28.638735 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.26.158:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:28.638788 kubelet[2304]: E1002 20:06:28.638786 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.26.158:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:28.653624 env[1635]: time="2023-10-02T20:06:28.653559204Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.698197 env[1635]: time="2023-10-02T20:06:28.698142017Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.701058 kubelet[2304]: W1002 20:06:28.700819 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.26.158:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-158&limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:28.701058 kubelet[2304]: E1002 20:06:28.700954 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.26.158:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-158&limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:28.722495 env[1635]: time="2023-10-02T20:06:28.722440161Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.743793 env[1635]: time="2023-10-02T20:06:28.743677026Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.756059 env[1635]: time="2023-10-02T20:06:28.756005218Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.758687 env[1635]: time="2023-10-02T20:06:28.758637299Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.763566 env[1635]: time="2023-10-02T20:06:28.763520691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.769904 env[1635]: time="2023-10-02T20:06:28.768169578Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.769904 env[1635]: time="2023-10-02T20:06:28.768745515Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.775623 env[1635]: time="2023-10-02T20:06:28.775575315Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.785330 env[1635]: time="2023-10-02T20:06:28.785278683Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.789789 env[1635]: time="2023-10-02T20:06:28.789736245Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:28.857526 env[1635]: time="2023-10-02T20:06:28.857094052Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:28.857526 env[1635]: time="2023-10-02T20:06:28.857305412Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:28.857526 env[1635]: time="2023-10-02T20:06:28.857327481Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:28.859585 env[1635]: time="2023-10-02T20:06:28.859507151Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c2ceb7334b1047e1abf6474ec29b95e7f717e87b938b215b18a7b696861461c7 pid=2343 runtime=io.containerd.runc.v2 Oct 2 20:06:28.871891 env[1635]: time="2023-10-02T20:06:28.871777159Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:28.872102 env[1635]: time="2023-10-02T20:06:28.871854039Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:28.872102 env[1635]: time="2023-10-02T20:06:28.871870027Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:28.872375 env[1635]: time="2023-10-02T20:06:28.872307868Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9937a53c972540c13a396e6b2b9f7949a665e01091ce8f15cd8cd342eda7ea22 pid=2363 runtime=io.containerd.runc.v2 Oct 2 20:06:28.882432 env[1635]: time="2023-10-02T20:06:28.882324966Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:28.882432 env[1635]: time="2023-10-02T20:06:28.882395525Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:28.882876 env[1635]: time="2023-10-02T20:06:28.882410513Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:28.882876 env[1635]: time="2023-10-02T20:06:28.882730807Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9872079ff7ed18a58290700f36b63e88890bade3558781a5f1b9b394ccb9fd00 pid=2376 runtime=io.containerd.runc.v2 Oct 2 20:06:28.895191 systemd[1]: Started cri-containerd-c2ceb7334b1047e1abf6474ec29b95e7f717e87b938b215b18a7b696861461c7.scope. Oct 2 20:06:28.932411 systemd[1]: Started cri-containerd-9872079ff7ed18a58290700f36b63e88890bade3558781a5f1b9b394ccb9fd00.scope. Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.935000 audit: BPF prog-id=70 op=LOAD Oct 2 20:06:28.936000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.936000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2343 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332636562373333346231303437653161626636343734656332396239 Oct 2 20:06:28.936000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.936000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2343 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332636562373333346231303437653161626636343734656332396239 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.937000 audit: BPF prog-id=71 op=LOAD Oct 2 20:06:28.937000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028f020 items=0 ppid=2343 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332636562373333346231303437653161626636343734656332396239 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.944196 systemd[1]: Started cri-containerd-9937a53c972540c13a396e6b2b9f7949a665e01091ce8f15cd8cd342eda7ea22.scope. Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.938000 audit: BPF prog-id=72 op=LOAD Oct 2 20:06:28.938000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028f068 items=0 ppid=2343 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332636562373333346231303437653161626636343734656332396239 Oct 2 20:06:28.947000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:06:28.947000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.947000 audit: BPF prog-id=73 op=LOAD Oct 2 20:06:28.947000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00028f478 items=0 ppid=2343 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332636562373333346231303437653161626636343734656332396239 Oct 2 20:06:28.983233 kubelet[2304]: W1002 20:06:28.983140 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.26.158:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:28.983403 kubelet[2304]: E1002 20:06:28.983263 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.26.158:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:28.991598 kubelet[2304]: E1002 20:06:28.991561 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.158:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-158?timeout=10s\": dial tcp 172.31.26.158:6443: connect: connection refused" interval="1.6s" Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.997000 audit: BPF prog-id=74 op=LOAD Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2376 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938373230373966663765643138613538323930373030663336623633 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2376 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938373230373966663765643138613538323930373030663336623633 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit: BPF prog-id=75 op=LOAD Oct 2 20:06:28.998000 audit[2396]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00018e5e0 items=0 ppid=2376 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938373230373966663765643138613538323930373030663336623633 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.998000 audit: BPF prog-id=76 op=LOAD Oct 2 20:06:28.998000 audit[2396]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00018e628 items=0 ppid=2376 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938373230373966663765643138613538323930373030663336623633 Oct 2 20:06:28.998000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:06:28.998000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:28.999000 audit: BPF prog-id=77 op=LOAD Oct 2 20:06:28.999000 audit[2396]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00018ea38 items=0 ppid=2376 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:28.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938373230373966663765643138613538323930373030663336623633 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.017000 audit: BPF prog-id=78 op=LOAD Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2363 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333761353363393732353430633133613339366536623262396637 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2363 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333761353363393732353430633133613339366536623262396637 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.018000 audit: BPF prog-id=79 op=LOAD Oct 2 20:06:29.018000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000298930 items=0 ppid=2363 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333761353363393732353430633133613339366536623262396637 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit: BPF prog-id=80 op=LOAD Oct 2 20:06:29.019000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000298978 items=0 ppid=2363 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333761353363393732353430633133613339366536623262396637 Oct 2 20:06:29.019000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:06:29.019000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.019000 audit: BPF prog-id=81 op=LOAD Oct 2 20:06:29.019000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000298d88 items=0 ppid=2363 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333761353363393732353430633133613339366536623262396637 Oct 2 20:06:29.025272 kubelet[2304]: W1002 20:06:29.025168 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.26.158:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:29.025402 kubelet[2304]: E1002 20:06:29.025295 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.26.158:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:29.055093 env[1635]: time="2023-10-02T20:06:29.055040312Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-26-158,Uid:668a28bbf6f96aa2b9f655bfcadae65c,Namespace:kube-system,Attempt:0,} returns sandbox id \"c2ceb7334b1047e1abf6474ec29b95e7f717e87b938b215b18a7b696861461c7\"" Oct 2 20:06:29.064782 env[1635]: time="2023-10-02T20:06:29.064738364Z" level=info msg="CreateContainer within sandbox \"c2ceb7334b1047e1abf6474ec29b95e7f717e87b938b215b18a7b696861461c7\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:06:29.098708 kubelet[2304]: I1002 20:06:29.098192 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-158" Oct 2 20:06:29.098708 kubelet[2304]: E1002 20:06:29.098674 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.158:6443/api/v1/nodes\": dial tcp 172.31.26.158:6443: connect: connection refused" node="ip-172-31-26-158" Oct 2 20:06:29.110193 env[1635]: time="2023-10-02T20:06:29.110067369Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-26-158,Uid:3324526c400c34fa95dd1a1aa60de1dd,Namespace:kube-system,Attempt:0,} returns sandbox id \"9937a53c972540c13a396e6b2b9f7949a665e01091ce8f15cd8cd342eda7ea22\"" Oct 2 20:06:29.115699 env[1635]: time="2023-10-02T20:06:29.115641512Z" level=info msg="CreateContainer within sandbox \"c2ceb7334b1047e1abf6474ec29b95e7f717e87b938b215b18a7b696861461c7\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e009d470be682569ecacfdcb35339e6716e1688fdd194057dd70d2466c397f98\"" Oct 2 20:06:29.121890 env[1635]: time="2023-10-02T20:06:29.121838682Z" level=info msg="StartContainer for \"e009d470be682569ecacfdcb35339e6716e1688fdd194057dd70d2466c397f98\"" Oct 2 20:06:29.126186 env[1635]: time="2023-10-02T20:06:29.126137082Z" level=info msg="CreateContainer within sandbox \"9937a53c972540c13a396e6b2b9f7949a665e01091ce8f15cd8cd342eda7ea22\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:06:29.130441 env[1635]: time="2023-10-02T20:06:29.130395520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-26-158,Uid:3f25c09e1ae82ad433cb1bddcca9e8a8,Namespace:kube-system,Attempt:0,} returns sandbox id \"9872079ff7ed18a58290700f36b63e88890bade3558781a5f1b9b394ccb9fd00\"" Oct 2 20:06:29.136230 env[1635]: time="2023-10-02T20:06:29.136169906Z" level=info msg="CreateContainer within sandbox \"9872079ff7ed18a58290700f36b63e88890bade3558781a5f1b9b394ccb9fd00\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:06:29.169949 systemd[1]: Started cri-containerd-e009d470be682569ecacfdcb35339e6716e1688fdd194057dd70d2466c397f98.scope. Oct 2 20:06:29.187166 env[1635]: time="2023-10-02T20:06:29.187096799Z" level=info msg="CreateContainer within sandbox \"9937a53c972540c13a396e6b2b9f7949a665e01091ce8f15cd8cd342eda7ea22\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9\"" Oct 2 20:06:29.188113 env[1635]: time="2023-10-02T20:06:29.188066820Z" level=info msg="StartContainer for \"c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9\"" Oct 2 20:06:29.196644 env[1635]: time="2023-10-02T20:06:29.196477083Z" level=info msg="CreateContainer within sandbox \"9872079ff7ed18a58290700f36b63e88890bade3558781a5f1b9b394ccb9fd00\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb\"" Oct 2 20:06:29.197588 env[1635]: time="2023-10-02T20:06:29.197553341Z" level=info msg="StartContainer for \"cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb\"" Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.203000 audit: BPF prog-id=82 op=LOAD Oct 2 20:06:29.210000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.210000 audit[2470]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=2343 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303964343730626536383235363965636163666463623335333339 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=2343 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303964343730626536383235363965636163666463623335333339 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.211000 audit: BPF prog-id=83 op=LOAD Oct 2 20:06:29.211000 audit[2470]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c00039cc50 items=0 ppid=2343 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303964343730626536383235363965636163666463623335333339 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.212000 audit: BPF prog-id=84 op=LOAD Oct 2 20:06:29.212000 audit[2470]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c00039cc98 items=0 ppid=2343 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303964343730626536383235363965636163666463623335333339 Oct 2 20:06:29.213000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:06:29.213000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { perfmon } for pid=2470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit[2470]: AVC avc: denied { bpf } for pid=2470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.213000 audit: BPF prog-id=85 op=LOAD Oct 2 20:06:29.213000 audit[2470]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c00039d0a8 items=0 ppid=2343 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303964343730626536383235363965636163666463623335333339 Oct 2 20:06:29.238817 systemd[1]: Started cri-containerd-c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9.scope. Oct 2 20:06:29.280761 systemd[1]: Started cri-containerd-cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb.scope. Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.303000 audit: BPF prog-id=86 op=LOAD Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2363 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331616662633931326562346165366438633163393766363332643365 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2363 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331616662633931326562346165366438633163393766363332643365 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.304000 audit: BPF prog-id=87 op=LOAD Oct 2 20:06:29.304000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000257df0 items=0 ppid=2363 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331616662633931326562346165366438633163393766363332643365 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.309000 audit: BPF prog-id=88 op=LOAD Oct 2 20:06:29.309000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000257e38 items=0 ppid=2363 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331616662633931326562346165366438633163393766363332643365 Oct 2 20:06:29.310000 audit: BPF prog-id=88 op=UNLOAD Oct 2 20:06:29.311000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.312000 audit: BPF prog-id=89 op=LOAD Oct 2 20:06:29.312000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d2248 items=0 ppid=2363 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331616662633931326562346165366438633163393766363332643365 Oct 2 20:06:29.328690 env[1635]: time="2023-10-02T20:06:29.328562962Z" level=info msg="StartContainer for \"e009d470be682569ecacfdcb35339e6716e1688fdd194057dd70d2466c397f98\" returns successfully" Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.332000 audit: BPF prog-id=90 op=LOAD Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2376 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613339653434396435353335666466633336343936313538343734 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2376 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613339653434396435353335666466633336343936313538343734 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit: BPF prog-id=91 op=LOAD Oct 2 20:06:29.334000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000240d20 items=0 ppid=2376 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613339653434396435353335666466633336343936313538343734 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit: BPF prog-id=92 op=LOAD Oct 2 20:06:29.334000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000240d68 items=0 ppid=2376 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613339653434396435353335666466633336343936313538343734 Oct 2 20:06:29.334000 audit: BPF prog-id=92 op=UNLOAD Oct 2 20:06:29.334000 audit: BPF prog-id=91 op=UNLOAD Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.334000 audit: BPF prog-id=93 op=LOAD Oct 2 20:06:29.334000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000241178 items=0 ppid=2376 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613339653434396435353335666466633336343936313538343734 Oct 2 20:06:29.400448 env[1635]: time="2023-10-02T20:06:29.400399605Z" level=info msg="StartContainer for \"cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb\" returns successfully" Oct 2 20:06:29.406351 env[1635]: time="2023-10-02T20:06:29.406202852Z" level=info msg="StartContainer for \"c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9\" returns successfully" Oct 2 20:06:29.673794 kubelet[2304]: E1002 20:06:29.673697 2304 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.26.158:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.26.158:6443: connect: connection refused Oct 2 20:06:29.972191 kubelet[2304]: E1002 20:06:29.971651 2304 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-26-158.178a631d657325c6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-26-158", UID:"ip-172-31-26-158", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-26-158"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 6, 27, 565659590, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 6, 27, 565659590, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.26.158:6443/api/v1/namespaces/default/events": dial tcp 172.31.26.158:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:06:30.700868 kubelet[2304]: I1002 20:06:30.700844 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-158" Oct 2 20:06:30.915531 update_engine[1629]: I1002 20:06:30.914160 1629 update_attempter.cc:505] Updating boot flags... Oct 2 20:06:31.435000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:31.437500 kernel: kauditd_printk_skb: 641 callbacks suppressed Oct 2 20:06:31.437609 kernel: audit: type=1400 audit(1696277191.435:680): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:31.454800 kernel: audit: type=1300 audit(1696277191.435:680): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c98000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:31.435000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c98000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:31.435000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:31.466494 kernel: audit: type=1327 audit(1696277191.435:680): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:31.444000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:31.480399 kernel: audit: type=1400 audit(1696277191.444:681): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:31.444000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000153b20 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:31.491325 kernel: audit: type=1300 audit(1696277191.444:681): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000153b20 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:31.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:31.507581 kernel: audit: type=1327 audit(1696277191.444:681): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:33.468000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.468000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004104000 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:06:33.484715 kernel: audit: type=1400 audit(1696277193.468:682): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.484861 kernel: audit: type=1300 audit(1696277193.468:682): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004104000 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:06:33.484896 kernel: audit: type=1327 audit(1696277193.468:682): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:33.468000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:33.468000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.498829 kernel: audit: type=1400 audit(1696277193.468:683): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.468000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00684e8e0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:06:33.468000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:33.468000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.468000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0040d1110 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:06:33.468000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:33.500000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.500000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0041a0de0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:06:33.500000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:33.505000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.505000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0064bbe20 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:06:33.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:33.669000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:33.669000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004210f00 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:06:33.669000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:33.798427 kubelet[2304]: I1002 20:06:33.798324 2304 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-26-158" Oct 2 20:06:34.567992 kubelet[2304]: I1002 20:06:34.567920 2304 apiserver.go:52] "Watching apiserver" Oct 2 20:06:34.576396 kubelet[2304]: I1002 20:06:34.576359 2304 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:06:34.647932 kubelet[2304]: I1002 20:06:34.647894 2304 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:06:36.524925 systemd[1]: Reloading. Oct 2 20:06:36.736704 /usr/lib/systemd/system-generators/torcx-generator[2858]: time="2023-10-02T20:06:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:36.737206 /usr/lib/systemd/system-generators/torcx-generator[2858]: time="2023-10-02T20:06:36Z" level=info msg="torcx already run" Oct 2 20:06:36.907741 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:36.907766 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:36.944057 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:37.148503 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:06:37.148643 kernel: audit: type=1400 audit(1696277197.139:688): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157421 kernel: audit: type=1400 audit(1696277197.139:689): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.169550 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:06:37.169675 kernel: audit: audit_lost=44 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:06:37.169704 kernel: audit: type=1400 audit(1696277197.139:690): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.169790 kernel: audit: backlog limit exceeded Oct 2 20:06:37.169824 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:06:37.173372 kernel: audit: audit_lost=45 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:06:37.173503 kernel: audit: backlog limit exceeded Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.178561 kernel: audit: type=1400 audit(1696277197.139:691): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.147000 audit: BPF prog-id=94 op=LOAD Oct 2 20:06:37.147000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.155000 audit: BPF prog-id=95 op=LOAD Oct 2 20:06:37.156000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit: BPF prog-id=96 op=LOAD Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.156000 audit: BPF prog-id=97 op=LOAD Oct 2 20:06:37.156000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:06:37.156000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit: BPF prog-id=98 op=LOAD Oct 2 20:06:37.157000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.157000 audit: BPF prog-id=99 op=LOAD Oct 2 20:06:37.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.179000 audit: BPF prog-id=101 op=LOAD Oct 2 20:06:37.179000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:06:37.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.181000 audit: BPF prog-id=104 op=LOAD Oct 2 20:06:37.182000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.182000 audit: BPF prog-id=105 op=LOAD Oct 2 20:06:37.183000 audit: BPF prog-id=90 op=UNLOAD Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.183000 audit: BPF prog-id=106 op=LOAD Oct 2 20:06:37.183000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit: BPF prog-id=107 op=LOAD Oct 2 20:06:37.188000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit: BPF prog-id=108 op=LOAD Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.188000 audit: BPF prog-id=109 op=LOAD Oct 2 20:06:37.188000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:06:37.188000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.189000 audit: BPF prog-id=110 op=LOAD Oct 2 20:06:37.189000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.190000 audit: BPF prog-id=111 op=LOAD Oct 2 20:06:37.190000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.191000 audit: BPF prog-id=112 op=LOAD Oct 2 20:06:37.191000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.193000 audit: BPF prog-id=113 op=LOAD Oct 2 20:06:37.193000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.196000 audit: BPF prog-id=114 op=LOAD Oct 2 20:06:37.196000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:06:37.230735 kubelet[2304]: I1002 20:06:37.230408 2304 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:37.230447 systemd[1]: Stopping kubelet.service... Oct 2 20:06:37.255329 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:06:37.255665 systemd[1]: Stopped kubelet.service. Oct 2 20:06:37.255812 systemd[1]: kubelet.service: Consumed 1.059s CPU time. Oct 2 20:06:37.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:37.262346 systemd[1]: Started kubelet.service. Oct 2 20:06:37.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:37.392826 kubelet[2911]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:37.392826 kubelet[2911]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:37.392826 kubelet[2911]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:37.394874 kubelet[2911]: I1002 20:06:37.392899 2911 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:37.405365 kubelet[2911]: I1002 20:06:37.405332 2911 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:06:37.405365 kubelet[2911]: I1002 20:06:37.405364 2911 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:37.407148 kubelet[2911]: I1002 20:06:37.406678 2911 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:06:37.409414 kubelet[2911]: I1002 20:06:37.409371 2911 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:06:37.412131 kubelet[2911]: I1002 20:06:37.412089 2911 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:37.422961 kubelet[2911]: I1002 20:06:37.422921 2911 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:37.426310 kubelet[2911]: I1002 20:06:37.423426 2911 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:37.426605 kubelet[2911]: I1002 20:06:37.426586 2911 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:06:37.426770 kubelet[2911]: I1002 20:06:37.426759 2911 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:06:37.426844 kubelet[2911]: I1002 20:06:37.426836 2911 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:06:37.426976 kubelet[2911]: I1002 20:06:37.426968 2911 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:37.438864 kubelet[2911]: I1002 20:06:37.438745 2911 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:06:37.439068 kubelet[2911]: I1002 20:06:37.439054 2911 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:37.439233 kubelet[2911]: I1002 20:06:37.439221 2911 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:06:37.439324 sudo[2926]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:06:37.439733 sudo[2926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:06:37.439839 kubelet[2911]: I1002 20:06:37.439823 2911 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:37.437000 audit[2926]: USER_ACCT pid=2926 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:37.438000 audit[2926]: CRED_REFR pid=2926 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:37.440000 audit[2926]: USER_START pid=2926 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:37.453598 kubelet[2911]: I1002 20:06:37.453570 2911 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:37.454475 kubelet[2911]: I1002 20:06:37.454456 2911 server.go:1168] "Started kubelet" Oct 2 20:06:37.488000 audit[2911]: AVC avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.488000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:37.488000 audit[2911]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008d7020 a1=c00087ec60 a2=c0008d6ff0 a3=25 items=0 ppid=1 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:37.488000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:37.498976 kubelet[2911]: I1002 20:06:37.498837 2911 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:37.498976 kubelet[2911]: I1002 20:06:37.498913 2911 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:37.498976 kubelet[2911]: I1002 20:06:37.498942 2911 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:37.497000 audit[2911]: AVC avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.497000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:37.497000 audit[2911]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cae280 a1=c00087ec78 a2=c0008d70b0 a3=25 items=0 ppid=1 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:37.497000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:37.500130 kubelet[2911]: E1002 20:06:37.499617 2911 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:37.500130 kubelet[2911]: E1002 20:06:37.499647 2911 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:37.504136 kubelet[2911]: I1002 20:06:37.504107 2911 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:37.505280 kubelet[2911]: I1002 20:06:37.505257 2911 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:06:37.519107 kubelet[2911]: I1002 20:06:37.512033 2911 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:06:37.519107 kubelet[2911]: I1002 20:06:37.512224 2911 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:06:37.519107 kubelet[2911]: I1002 20:06:37.514562 2911 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:06:37.621797 kubelet[2911]: I1002 20:06:37.621772 2911 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:06:37.631701 kubelet[2911]: I1002 20:06:37.630901 2911 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-158" Oct 2 20:06:37.631961 kubelet[2911]: I1002 20:06:37.631947 2911 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:06:37.632229 kubelet[2911]: I1002 20:06:37.632217 2911 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:06:37.632351 kubelet[2911]: I1002 20:06:37.632342 2911 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:06:37.632502 kubelet[2911]: E1002 20:06:37.632492 2911 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:06:37.657859 kubelet[2911]: I1002 20:06:37.657829 2911 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-26-158" Oct 2 20:06:37.658149 kubelet[2911]: I1002 20:06:37.658136 2911 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-26-158" Oct 2 20:06:37.719994 kubelet[2911]: I1002 20:06:37.719875 2911 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:06:37.719994 kubelet[2911]: I1002 20:06:37.719906 2911 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:37.719994 kubelet[2911]: I1002 20:06:37.719928 2911 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:37.722323 kubelet[2911]: I1002 20:06:37.722294 2911 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:06:37.722323 kubelet[2911]: I1002 20:06:37.722326 2911 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:06:37.722515 kubelet[2911]: I1002 20:06:37.722335 2911 policy_none.go:49] "None policy: Start" Oct 2 20:06:37.723369 kubelet[2911]: I1002 20:06:37.723344 2911 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:06:37.723476 kubelet[2911]: I1002 20:06:37.723376 2911 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:37.723565 kubelet[2911]: I1002 20:06:37.723550 2911 state_mem.go:75] "Updated machine memory state" Oct 2 20:06:37.729530 kubelet[2911]: I1002 20:06:37.729505 2911 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:37.729781 kubelet[2911]: I1002 20:06:37.729574 2911 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:37.728000 audit[2911]: AVC avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:37.728000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:37.728000 audit[2911]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ecb5c0 a1=c001008150 a2=c000ecb590 a3=25 items=0 ppid=1 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:37.728000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:37.732742 kubelet[2911]: I1002 20:06:37.732717 2911 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:37.732857 kubelet[2911]: I1002 20:06:37.732804 2911 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:37.732857 kubelet[2911]: I1002 20:06:37.732850 2911 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:37.735677 kubelet[2911]: I1002 20:06:37.735652 2911 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:37.816680 kubelet[2911]: I1002 20:06:37.816643 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-ca-certs\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:37.816841 kubelet[2911]: I1002 20:06:37.816698 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:37.816841 kubelet[2911]: I1002 20:06:37.816727 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3324526c400c34fa95dd1a1aa60de1dd-kubeconfig\") pod \"kube-scheduler-ip-172-31-26-158\" (UID: \"3324526c400c34fa95dd1a1aa60de1dd\") " pod="kube-system/kube-scheduler-ip-172-31-26-158" Oct 2 20:06:37.816841 kubelet[2911]: I1002 20:06:37.816752 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/668a28bbf6f96aa2b9f655bfcadae65c-ca-certs\") pod \"kube-apiserver-ip-172-31-26-158\" (UID: \"668a28bbf6f96aa2b9f655bfcadae65c\") " pod="kube-system/kube-apiserver-ip-172-31-26-158" Oct 2 20:06:37.816841 kubelet[2911]: I1002 20:06:37.816778 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/668a28bbf6f96aa2b9f655bfcadae65c-k8s-certs\") pod \"kube-apiserver-ip-172-31-26-158\" (UID: \"668a28bbf6f96aa2b9f655bfcadae65c\") " pod="kube-system/kube-apiserver-ip-172-31-26-158" Oct 2 20:06:37.816841 kubelet[2911]: I1002 20:06:37.816808 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/668a28bbf6f96aa2b9f655bfcadae65c-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-26-158\" (UID: \"668a28bbf6f96aa2b9f655bfcadae65c\") " pod="kube-system/kube-apiserver-ip-172-31-26-158" Oct 2 20:06:37.817061 kubelet[2911]: I1002 20:06:37.816835 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-k8s-certs\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:37.817061 kubelet[2911]: I1002 20:06:37.816866 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-kubeconfig\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:37.817061 kubelet[2911]: I1002 20:06:37.816902 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f25c09e1ae82ad433cb1bddcca9e8a8-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-26-158\" (UID: \"3f25c09e1ae82ad433cb1bddcca9e8a8\") " pod="kube-system/kube-controller-manager-ip-172-31-26-158" Oct 2 20:06:38.274530 sudo[2926]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:38.273000 audit[2926]: USER_END pid=2926 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:38.273000 audit[2926]: CRED_DISP pid=2926 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:38.456441 kubelet[2911]: I1002 20:06:38.456396 2911 apiserver.go:52] "Watching apiserver" Oct 2 20:06:38.514942 kubelet[2911]: I1002 20:06:38.514898 2911 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:06:38.521256 kubelet[2911]: I1002 20:06:38.521213 2911 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:06:38.720646 kubelet[2911]: E1002 20:06:38.720611 2911 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-26-158\" already exists" pod="kube-system/kube-scheduler-ip-172-31-26-158" Oct 2 20:06:38.722985 kubelet[2911]: E1002 20:06:38.722953 2911 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-26-158\" already exists" pod="kube-system/kube-apiserver-ip-172-31-26-158" Oct 2 20:06:38.735949 kubelet[2911]: I1002 20:06:38.735922 2911 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-26-158" podStartSLOduration=1.734986026 podCreationTimestamp="2023-10-02 20:06:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:38.732618818 +0000 UTC m=+1.449539778" watchObservedRunningTime="2023-10-02 20:06:38.734986026 +0000 UTC m=+1.451906978" Oct 2 20:06:38.769034 kubelet[2911]: I1002 20:06:38.769006 2911 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-26-158" podStartSLOduration=1.7689632 podCreationTimestamp="2023-10-02 20:06:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:38.758073803 +0000 UTC m=+1.474994762" watchObservedRunningTime="2023-10-02 20:06:38.7689632 +0000 UTC m=+1.485884159" Oct 2 20:06:38.769341 kubelet[2911]: I1002 20:06:38.769329 2911 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-26-158" podStartSLOduration=1.769299308 podCreationTimestamp="2023-10-02 20:06:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:38.768122359 +0000 UTC m=+1.485043319" watchObservedRunningTime="2023-10-02 20:06:38.769299308 +0000 UTC m=+1.486220270" Oct 2 20:06:39.896456 sudo[1898]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:39.895000 audit[1898]: USER_END pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:39.895000 audit[1898]: CRED_DISP pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:39.921287 sshd[1895]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:39.924000 audit[1895]: USER_END pid=1895 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:39.924000 audit[1895]: CRED_DISP pid=1895 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:39.928666 systemd[1]: sshd@6-172.31.26.158:22-139.178.89.65:33226.service: Deactivated successfully. Oct 2 20:06:39.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.158:22-139.178.89.65:33226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:39.930095 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:06:39.930388 systemd[1]: session-7.scope: Consumed 4.631s CPU time. Oct 2 20:06:39.931115 systemd-logind[1628]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:06:39.932143 systemd-logind[1628]: Removed session 7. Oct 2 20:06:47.342000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:06:47.347273 kernel: kauditd_printk_skb: 332 callbacks suppressed Oct 2 20:06:47.347462 kernel: audit: type=1400 audit(1696277207.342:910): avc: denied { watch } for pid=2534 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:06:47.342000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00082d240 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:47.361262 kernel: audit: type=1300 audit(1696277207.342:910): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00082d240 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:47.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:47.369332 kernel: audit: type=1327 audit(1696277207.342:910): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:48.134000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:48.147268 kernel: audit: type=1400 audit(1696277208.134:911): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:48.134000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:48.134000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001285200 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:48.162414 kernel: audit: type=1400 audit(1696277208.134:912): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:48.162550 kernel: audit: type=1300 audit(1696277208.134:912): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001285200 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:48.162583 kernel: audit: type=1327 audit(1696277208.134:912): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:48.134000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:48.142000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:48.142000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001285240 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:48.204309 kernel: audit: type=1400 audit(1696277208.142:913): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:48.204514 kernel: audit: type=1300 audit(1696277208.142:913): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001285240 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:48.204562 kernel: audit: type=1327 audit(1696277208.142:913): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:48.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:48.142000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:48.142000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001285280 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:48.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:48.134000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00117ff60 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:06:48.134000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:49.458549 kubelet[2911]: I1002 20:06:49.458513 2911 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:06:49.459364 env[1635]: time="2023-10-02T20:06:49.459229043Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:06:49.459785 kubelet[2911]: I1002 20:06:49.459597 2911 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:06:50.341460 kubelet[2911]: I1002 20:06:50.341412 2911 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:50.352696 systemd[1]: Created slice kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice. Oct 2 20:06:50.362794 kubelet[2911]: W1002 20:06:50.362766 2911 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.363106 kubelet[2911]: E1002 20:06:50.363087 2911 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.363735 kubelet[2911]: I1002 20:06:50.363711 2911 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:50.364989 kubelet[2911]: W1002 20:06:50.364969 2911 reflector.go:533] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.365307 kubelet[2911]: E1002 20:06:50.365293 2911 reflector.go:148] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.365591 kubelet[2911]: W1002 20:06:50.365469 2911 reflector.go:533] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.365828 kubelet[2911]: E1002 20:06:50.365814 2911 reflector.go:148] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.366042 kubelet[2911]: W1002 20:06:50.366021 2911 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.366213 kubelet[2911]: E1002 20:06:50.366201 2911 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:06:50.378164 systemd[1]: Created slice kubepods-besteffort-pod1bc571eb_d978_40b0_beef_0c3cbb52f7d6.slice. Oct 2 20:06:50.473364 kubelet[2911]: I1002 20:06:50.473325 2911 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:06:50.482783 systemd[1]: Created slice kubepods-besteffort-pod4b9e91e6_715d_47ea_a47f_0c0265de215f.slice. Oct 2 20:06:50.497771 kubelet[2911]: I1002 20:06:50.497735 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-xtables-lock\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.498065 kubelet[2911]: I1002 20:06:50.498049 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-run\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.498231 kubelet[2911]: I1002 20:06:50.498211 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-cgroup\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.498647 kubelet[2911]: I1002 20:06:50.498489 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cni-path\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.498810 kubelet[2911]: I1002 20:06:50.498798 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1bc571eb-d978-40b0-beef-0c3cbb52f7d6-xtables-lock\") pod \"kube-proxy-zfqjw\" (UID: \"1bc571eb-d978-40b0-beef-0c3cbb52f7d6\") " pod="kube-system/kube-proxy-zfqjw" Oct 2 20:06:50.499104 kubelet[2911]: I1002 20:06:50.498999 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-etc-cni-netd\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.499283 kubelet[2911]: I1002 20:06:50.499271 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s9fz4\" (UniqueName: \"kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-kube-api-access-s9fz4\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.499484 kubelet[2911]: I1002 20:06:50.499472 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1bc571eb-d978-40b0-beef-0c3cbb52f7d6-lib-modules\") pod \"kube-proxy-zfqjw\" (UID: \"1bc571eb-d978-40b0-beef-0c3cbb52f7d6\") " pod="kube-system/kube-proxy-zfqjw" Oct 2 20:06:50.499677 kubelet[2911]: I1002 20:06:50.499664 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-bpf-maps\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.499866 kubelet[2911]: I1002 20:06:50.499854 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-net\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.500195 kubelet[2911]: I1002 20:06:50.500182 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nw6kq\" (UniqueName: \"kubernetes.io/projected/1bc571eb-d978-40b0-beef-0c3cbb52f7d6-kube-api-access-nw6kq\") pod \"kube-proxy-zfqjw\" (UID: \"1bc571eb-d978-40b0-beef-0c3cbb52f7d6\") " pod="kube-system/kube-proxy-zfqjw" Oct 2 20:06:50.500418 kubelet[2911]: I1002 20:06:50.500405 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hostproc\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.500599 kubelet[2911]: I1002 20:06:50.500587 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hubble-tls\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.500777 kubelet[2911]: I1002 20:06:50.500766 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1bc571eb-d978-40b0-beef-0c3cbb52f7d6-kube-proxy\") pod \"kube-proxy-zfqjw\" (UID: \"1bc571eb-d978-40b0-beef-0c3cbb52f7d6\") " pod="kube-system/kube-proxy-zfqjw" Oct 2 20:06:50.501041 kubelet[2911]: I1002 20:06:50.501028 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-lib-modules\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.501343 kubelet[2911]: I1002 20:06:50.501191 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e5d4915b-86e7-4935-aa2e-d2a6778763fa-clustermesh-secrets\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.501639 kubelet[2911]: I1002 20:06:50.501606 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-kernel\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.501806 kubelet[2911]: I1002 20:06:50.501779 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-config-path\") pod \"cilium-9pclg\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " pod="kube-system/cilium-9pclg" Oct 2 20:06:50.602496 kubelet[2911]: I1002 20:06:50.602390 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b7dkt\" (UniqueName: \"kubernetes.io/projected/4b9e91e6-715d-47ea-a47f-0c0265de215f-kube-api-access-b7dkt\") pod \"cilium-operator-574c4bb98d-m425v\" (UID: \"4b9e91e6-715d-47ea-a47f-0c0265de215f\") " pod="kube-system/cilium-operator-574c4bb98d-m425v" Oct 2 20:06:50.604332 kubelet[2911]: I1002 20:06:50.604307 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4b9e91e6-715d-47ea-a47f-0c0265de215f-cilium-config-path\") pod \"cilium-operator-574c4bb98d-m425v\" (UID: \"4b9e91e6-715d-47ea-a47f-0c0265de215f\") " pod="kube-system/cilium-operator-574c4bb98d-m425v" Oct 2 20:06:51.588716 env[1635]: time="2023-10-02T20:06:51.588666717Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-zfqjw,Uid:1bc571eb-d978-40b0-beef-0c3cbb52f7d6,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:51.603443 kubelet[2911]: E1002 20:06:51.603404 2911 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 20:06:51.603916 kubelet[2911]: E1002 20:06:51.603517 2911 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-config-path podName:e5d4915b-86e7-4935-aa2e-d2a6778763fa nodeName:}" failed. No retries permitted until 2023-10-02 20:06:52.103490076 +0000 UTC m=+14.820411034 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-config-path") pod "cilium-9pclg" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa") : failed to sync configmap cache: timed out waiting for the condition Oct 2 20:06:51.618152 env[1635]: time="2023-10-02T20:06:51.618073746Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:51.618483 env[1635]: time="2023-10-02T20:06:51.618123879Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:51.618483 env[1635]: time="2023-10-02T20:06:51.618138906Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:51.618483 env[1635]: time="2023-10-02T20:06:51.618353451Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9d89365a2d145eb5dfbe66be0e404aa6cd150e989da3e89a6f2ef87ed90593a5 pid=2985 runtime=io.containerd.runc.v2 Oct 2 20:06:51.643588 systemd[1]: Started cri-containerd-9d89365a2d145eb5dfbe66be0e404aa6cd150e989da3e89a6f2ef87ed90593a5.scope. Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit: BPF prog-id=115 op=LOAD Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2985 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383933363561326431343565623564666265363662653065343034 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=2985 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383933363561326431343565623564666265363662653065343034 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit: BPF prog-id=116 op=LOAD Oct 2 20:06:51.665000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000404720 items=0 ppid=2985 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383933363561326431343565623564666265363662653065343034 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.665000 audit: BPF prog-id=117 op=LOAD Oct 2 20:06:51.665000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c000404768 items=0 ppid=2985 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383933363561326431343565623564666265363662653065343034 Oct 2 20:06:51.666000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:06:51.666000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.666000 audit: BPF prog-id=118 op=LOAD Oct 2 20:06:51.666000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000404b78 items=0 ppid=2985 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383933363561326431343565623564666265363662653065343034 Oct 2 20:06:51.685217 env[1635]: time="2023-10-02T20:06:51.685160483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-zfqjw,Uid:1bc571eb-d978-40b0-beef-0c3cbb52f7d6,Namespace:kube-system,Attempt:0,} returns sandbox id \"9d89365a2d145eb5dfbe66be0e404aa6cd150e989da3e89a6f2ef87ed90593a5\"" Oct 2 20:06:51.692774 env[1635]: time="2023-10-02T20:06:51.692723092Z" level=info msg="CreateContainer within sandbox \"9d89365a2d145eb5dfbe66be0e404aa6cd150e989da3e89a6f2ef87ed90593a5\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:06:51.706832 kubelet[2911]: E1002 20:06:51.706657 2911 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 20:06:51.707050 kubelet[2911]: E1002 20:06:51.706896 2911 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/4b9e91e6-715d-47ea-a47f-0c0265de215f-cilium-config-path podName:4b9e91e6-715d-47ea-a47f-0c0265de215f nodeName:}" failed. No retries permitted until 2023-10-02 20:06:52.206869091 +0000 UTC m=+14.923790041 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/4b9e91e6-715d-47ea-a47f-0c0265de215f-cilium-config-path") pod "cilium-operator-574c4bb98d-m425v" (UID: "4b9e91e6-715d-47ea-a47f-0c0265de215f") : failed to sync configmap cache: timed out waiting for the condition Oct 2 20:06:51.808445 env[1635]: time="2023-10-02T20:06:51.808392174Z" level=info msg="CreateContainer within sandbox \"9d89365a2d145eb5dfbe66be0e404aa6cd150e989da3e89a6f2ef87ed90593a5\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"ad1342bcf7340519a176c92cef6f35b652615c42c65d76ec276d9ceeb4fea8b1\"" Oct 2 20:06:51.810770 env[1635]: time="2023-10-02T20:06:51.809321661Z" level=info msg="StartContainer for \"ad1342bcf7340519a176c92cef6f35b652615c42c65d76ec276d9ceeb4fea8b1\"" Oct 2 20:06:51.855215 systemd[1]: Started cri-containerd-ad1342bcf7340519a176c92cef6f35b652615c42c65d76ec276d9ceeb4fea8b1.scope. Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2985 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164313334326263663733343035313961313736633932636566366633 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit: BPF prog-id=119 op=LOAD Oct 2 20:06:51.888000 audit[3027]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002d9a60 items=0 ppid=2985 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164313334326263663733343035313961313736633932636566366633 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit: BPF prog-id=120 op=LOAD Oct 2 20:06:51.888000 audit[3027]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002d9aa8 items=0 ppid=2985 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164313334326263663733343035313961313736633932636566366633 Oct 2 20:06:51.888000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:06:51.888000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { perfmon } for pid=3027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit[3027]: AVC avc: denied { bpf } for pid=3027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:51.888000 audit: BPF prog-id=121 op=LOAD Oct 2 20:06:51.888000 audit[3027]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002d9b38 items=0 ppid=2985 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:51.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164313334326263663733343035313961313736633932636566366633 Oct 2 20:06:51.912184 env[1635]: time="2023-10-02T20:06:51.912128530Z" level=info msg="StartContainer for \"ad1342bcf7340519a176c92cef6f35b652615c42c65d76ec276d9ceeb4fea8b1\" returns successfully" Oct 2 20:06:52.162601 env[1635]: time="2023-10-02T20:06:52.162558654Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-9pclg,Uid:e5d4915b-86e7-4935-aa2e-d2a6778763fa,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:52.201897 env[1635]: time="2023-10-02T20:06:52.199973105Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:52.201897 env[1635]: time="2023-10-02T20:06:52.200213431Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:52.201897 env[1635]: time="2023-10-02T20:06:52.200233622Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:52.201897 env[1635]: time="2023-10-02T20:06:52.200588584Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2 pid=3068 runtime=io.containerd.runc.v2 Oct 2 20:06:52.230716 systemd[1]: Started cri-containerd-b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2.scope. Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.248000 audit: BPF prog-id=122 op=LOAD Oct 2 20:06:52.248000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.248000 audit[3079]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=3068 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363236623337326530643464366332323661303664373865303861 Oct 2 20:06:52.248000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.248000 audit[3079]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014f6b0 a2=3c a3=c items=0 ppid=3068 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363236623337326530643464366332323661303664373865303861 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit: BPF prog-id=123 op=LOAD Oct 2 20:06:52.249000 audit[3079]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014f9d8 a2=78 a3=c00038c340 items=0 ppid=3068 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363236623337326530643464366332323661303664373865303861 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit: BPF prog-id=124 op=LOAD Oct 2 20:06:52.249000 audit[3079]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014f770 a2=78 a3=c00038c388 items=0 ppid=3068 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363236623337326530643464366332323661303664373865303861 Oct 2 20:06:52.249000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:06:52.249000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { perfmon } for pid=3079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit[3079]: AVC avc: denied { bpf } for pid=3079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.249000 audit: BPF prog-id=125 op=LOAD Oct 2 20:06:52.249000 audit[3079]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014fc30 a2=78 a3=c00038c798 items=0 ppid=3068 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363236623337326530643464366332323661303664373865303861 Oct 2 20:06:52.278000 audit[3111]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.278000 audit[3111]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff16f78aa0 a2=0 a3=7fff16f78a8c items=0 ppid=3038 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.278000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:52.283000 audit[3114]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.283000 audit[3114]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffecc393dc0 a2=0 a3=7ffecc393dac items=0 ppid=3038 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.283000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:52.290213 env[1635]: time="2023-10-02T20:06:52.290163743Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-m425v,Uid:4b9e91e6-715d-47ea-a47f-0c0265de215f,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:52.304317 env[1635]: time="2023-10-02T20:06:52.304273034Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-9pclg,Uid:e5d4915b-86e7-4935-aa2e-d2a6778763fa,Namespace:kube-system,Attempt:0,} returns sandbox id \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\"" Oct 2 20:06:52.303000 audit[3110]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.303000 audit[3110]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe21dea2c0 a2=0 a3=7ffe21dea2ac items=0 ppid=3038 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.303000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:52.306000 audit[3120]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=3120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.306000 audit[3120]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcc7483b20 a2=0 a3=7ffcc7483b0c items=0 ppid=3038 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.306000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:52.308000 audit[3121]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.308000 audit[3121]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6718bfa0 a2=0 a3=7fff6718bf8c items=0 ppid=3038 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.308000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:52.310995 env[1635]: time="2023-10-02T20:06:52.310940574Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:06:52.312000 audit[3122]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.312000 audit[3122]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff38bed540 a2=0 a3=7fff38bed52c items=0 ppid=3038 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.312000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:52.342915 env[1635]: time="2023-10-02T20:06:52.342661129Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:52.342915 env[1635]: time="2023-10-02T20:06:52.342719616Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:52.342915 env[1635]: time="2023-10-02T20:06:52.342732382Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:52.343610 env[1635]: time="2023-10-02T20:06:52.343544293Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7 pid=3129 runtime=io.containerd.runc.v2 Oct 2 20:06:52.378175 systemd[1]: run-containerd-runc-k8s.io-56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7-runc.WNG0pa.mount: Deactivated successfully. Oct 2 20:06:52.381063 systemd[1]: Started cri-containerd-56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7.scope. Oct 2 20:06:52.387000 audit[3150]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.390383 kernel: kauditd_printk_skb: 180 callbacks suppressed Oct 2 20:06:52.390480 kernel: audit: type=1325 audit(1696277212.387:963): table=filter:44 family=2 entries=1 op=nft_register_chain pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.387000 audit[3150]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff2501f380 a2=0 a3=7fff2501f36c items=0 ppid=3038 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.400789 kernel: audit: type=1300 audit(1696277212.387:963): arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff2501f380 a2=0 a3=7fff2501f36c items=0 ppid=3038 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.387000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:52.413328 kernel: audit: type=1327 audit(1696277212.387:963): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:52.411000 audit[3155]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.411000 audit[3155]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd238508e0 a2=0 a3=7ffd238508cc items=0 ppid=3038 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.431090 kernel: audit: type=1325 audit(1696277212.411:964): table=filter:45 family=2 entries=1 op=nft_register_rule pid=3155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.431216 kernel: audit: type=1300 audit(1696277212.411:964): arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd238508e0 a2=0 a3=7ffd238508cc items=0 ppid=3038 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.411000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:06:52.440559 kernel: audit: type=1327 audit(1696277212.411:964): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:06:52.428000 audit[3163]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.452102 kernel: audit: type=1325 audit(1696277212.428:965): table=filter:46 family=2 entries=1 op=nft_register_rule pid=3163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.452333 kernel: audit: type=1300 audit(1696277212.428:965): arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc8a974a30 a2=0 a3=7ffc8a974a1c items=0 ppid=3038 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.452370 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:06:52.428000 audit[3163]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc8a974a30 a2=0 a3=7ffc8a974a1c items=0 ppid=3038 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.456885 kernel: audit: type=1327 audit(1696277212.428:965): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:06:52.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:06:52.433000 audit[3164]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.433000 audit[3164]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffddb1bdc40 a2=0 a3=7ffddb1bdc2c items=0 ppid=3038 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.433000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:52.438000 audit[3166]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.438000 audit[3166]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc6e231820 a2=0 a3=7ffc6e23180c items=0 ppid=3038 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.438000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.438000 audit: BPF prog-id=126 op=LOAD Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=3129 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333639646362376537653539663530383439343064336364366365 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=3129 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333639646362376537653539663530383439343064336364366365 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.439000 audit: BPF prog-id=127 op=LOAD Oct 2 20:06:52.439000 audit[3141]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000025550 items=0 ppid=3129 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333639646362376537653539663530383439343064336364366365 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit: BPF prog-id=128 op=LOAD Oct 2 20:06:52.443000 audit[3141]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c000025598 items=0 ppid=3129 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333639646362376537653539663530383439343064336364366365 Oct 2 20:06:52.443000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:06:52.443000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { perfmon } for pid=3141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.443000 audit[3141]: AVC avc: denied { bpf } for pid=3141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:52.455000 audit[3167]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.455000 audit[3167]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1155e750 a2=0 a3=7ffc1155e73c items=0 ppid=3038 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:52.443000 audit[3141]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0000259a8 items=0 ppid=3129 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333639646362376537653539663530383439343064336364366365 Oct 2 20:06:52.465000 audit[3169]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.465000 audit[3169]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc376f14a0 a2=0 a3=7ffc376f148c items=0 ppid=3038 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:52.472000 audit[3172]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.472000 audit[3172]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffddc17b5b0 a2=0 a3=7ffddc17b59c items=0 ppid=3038 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.472000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:06:52.474000 audit[3173]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.474000 audit[3173]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7d77b7b0 a2=0 a3=7fff7d77b79c items=0 ppid=3038 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:52.478000 audit[3175]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.478000 audit[3175]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff5f2bd850 a2=0 a3=7fff5f2bd83c items=0 ppid=3038 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.478000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:52.479000 audit[3176]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.479000 audit[3176]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc0b1b2950 a2=0 a3=7ffc0b1b293c items=0 ppid=3038 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.479000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:52.483000 audit[3178]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.483000 audit[3178]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdc299dfc0 a2=0 a3=7ffdc299dfac items=0 ppid=3038 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.483000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:52.492000 audit[3181]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.492000 audit[3181]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffef6188090 a2=0 a3=7ffef618807c items=0 ppid=3038 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.492000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:52.499000 audit[3184]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.499000 audit[3184]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc46b75cf0 a2=0 a3=7ffc46b75cdc items=0 ppid=3038 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.499000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:52.501000 audit[3185]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.501000 audit[3185]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffee5d7f760 a2=0 a3=7ffee5d7f74c items=0 ppid=3038 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:52.511000 audit[3187]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.511000 audit[3187]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff0f951220 a2=0 a3=7fff0f95120c items=0 ppid=3038 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.511000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:52.518000 audit[3196]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.518000 audit[3196]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe6816f610 a2=0 a3=7ffe6816f5fc items=0 ppid=3038 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.518000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:52.525816 env[1635]: time="2023-10-02T20:06:52.525758291Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-m425v,Uid:4b9e91e6-715d-47ea-a47f-0c0265de215f,Namespace:kube-system,Attempt:0,} returns sandbox id \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\"" Oct 2 20:06:52.532000 audit[3201]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.532000 audit[3201]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffce3a194f0 a2=0 a3=7ffce3a194dc items=0 ppid=3038 pid=3201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.532000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:52.536000 audit[3203]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:52.536000 audit[3203]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe84425ac0 a2=0 a3=7ffe84425aac items=0 ppid=3038 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.536000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:52.569000 audit[3205]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:52.569000 audit[3205]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffefae87da0 a2=0 a3=7ffefae87d8c items=0 ppid=3038 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.569000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:52.577000 audit[3205]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:52.577000 audit[3205]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffefae87da0 a2=0 a3=7ffefae87d8c items=0 ppid=3038 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.577000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:52.579000 audit[3210]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.579000 audit[3210]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc49ae1d40 a2=0 a3=7ffc49ae1d2c items=0 ppid=3038 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.579000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:52.583000 audit[3212]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.583000 audit[3212]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffefdaf9860 a2=0 a3=7ffefdaf984c items=0 ppid=3038 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:06:52.589000 audit[3215]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.589000 audit[3215]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd5aa0b970 a2=0 a3=7ffd5aa0b95c items=0 ppid=3038 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.589000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:06:52.592000 audit[3216]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.592000 audit[3216]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff17ebf50 a2=0 a3=7ffff17ebf3c items=0 ppid=3038 pid=3216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.592000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:52.596000 audit[3218]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.596000 audit[3218]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff5c3385e0 a2=0 a3=7fff5c3385cc items=0 ppid=3038 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.596000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:52.598000 audit[3219]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.598000 audit[3219]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb54dc500 a2=0 a3=7ffdb54dc4ec items=0 ppid=3038 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.598000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:52.602000 audit[3221]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.602000 audit[3221]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe583dcf00 a2=0 a3=7ffe583dceec items=0 ppid=3038 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:06:52.608000 audit[3224]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.608000 audit[3224]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe8448f350 a2=0 a3=7ffe8448f33c items=0 ppid=3038 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.608000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:52.610000 audit[3225]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.610000 audit[3225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc56fd83a0 a2=0 a3=7ffc56fd838c items=0 ppid=3038 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.610000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:52.613000 audit[3227]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.613000 audit[3227]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe80ea5600 a2=0 a3=7ffe80ea55ec items=0 ppid=3038 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.613000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:52.616000 audit[3228]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.616000 audit[3228]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff5c1a4c90 a2=0 a3=7fff5c1a4c7c items=0 ppid=3038 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.616000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:52.619000 audit[3230]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.619000 audit[3230]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe7baac9f0 a2=0 a3=7ffe7baac9dc items=0 ppid=3038 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.619000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:52.634000 audit[3233]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.634000 audit[3233]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc45add160 a2=0 a3=7ffc45add14c items=0 ppid=3038 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.634000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:52.649000 audit[3236]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.649000 audit[3236]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeecf096f0 a2=0 a3=7ffeecf096dc items=0 ppid=3038 pid=3236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.649000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:06:52.650000 audit[3237]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.650000 audit[3237]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdc90a18c0 a2=0 a3=7ffdc90a18ac items=0 ppid=3038 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.650000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:52.653000 audit[3239]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.653000 audit[3239]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd989479d0 a2=0 a3=7ffd989479bc items=0 ppid=3038 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.653000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:52.658000 audit[3242]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.658000 audit[3242]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffdbdb24f50 a2=0 a3=7ffdbdb24f3c items=0 ppid=3038 pid=3242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.658000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:52.660000 audit[3243]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.660000 audit[3243]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc72a23390 a2=0 a3=7ffc72a2337c items=0 ppid=3038 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.660000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:52.664000 audit[3245]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.664000 audit[3245]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff0f6dc9f0 a2=0 a3=7fff0f6dc9dc items=0 ppid=3038 pid=3245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.664000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:52.668000 audit[3248]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.668000 audit[3248]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff81bc0970 a2=0 a3=7fff81bc095c items=0 ppid=3038 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.668000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:52.673000 audit[3249]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.673000 audit[3249]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf94a3f20 a2=0 a3=7ffdf94a3f0c items=0 ppid=3038 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.673000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:52.678000 audit[3251]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:52.678000 audit[3251]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffff0ba6100 a2=0 a3=7ffff0ba60ec items=0 ppid=3038 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.678000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:52.682000 audit[3253]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:52.682000 audit[3253]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffeb729cc80 a2=0 a3=7ffeb729cc6c items=0 ppid=3038 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.682000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:52.684000 audit[3253]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:52.684000 audit[3253]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffeb729cc80 a2=0 a3=7ffeb729cc6c items=0 ppid=3038 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:52.684000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:58.743458 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2350103884.mount: Deactivated successfully. Oct 2 20:07:01.120028 kernel: kauditd_printk_skb: 186 callbacks suppressed Oct 2 20:07:01.120286 kernel: audit: type=1130 audit(1696277221.107:1026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.158:22-198.235.24.130:62532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.158:22-198.235.24.130:62532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.108989 systemd[1]: Started sshd@7-172.31.26.158:22-198.235.24.130:62532.service. Oct 2 20:07:03.057099 env[1635]: time="2023-10-02T20:07:03.057048862Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:03.060287 env[1635]: time="2023-10-02T20:07:03.060235794Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:03.062999 env[1635]: time="2023-10-02T20:07:03.062951025Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:03.063596 env[1635]: time="2023-10-02T20:07:03.063558578Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:07:03.065342 env[1635]: time="2023-10-02T20:07:03.065306610Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:07:03.066835 env[1635]: time="2023-10-02T20:07:03.066776088Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:07:03.085165 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount628131599.mount: Deactivated successfully. Oct 2 20:07:03.104066 env[1635]: time="2023-10-02T20:07:03.104006865Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\"" Oct 2 20:07:03.105675 env[1635]: time="2023-10-02T20:07:03.105500443Z" level=info msg="StartContainer for \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\"" Oct 2 20:07:03.168954 systemd[1]: Started cri-containerd-63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0.scope. Oct 2 20:07:03.192447 systemd[1]: cri-containerd-63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0.scope: Deactivated successfully. Oct 2 20:07:03.313089 env[1635]: time="2023-10-02T20:07:03.312932127Z" level=info msg="shim disconnected" id=63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0 Oct 2 20:07:03.313089 env[1635]: time="2023-10-02T20:07:03.313011295Z" level=warning msg="cleaning up after shim disconnected" id=63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0 namespace=k8s.io Oct 2 20:07:03.313089 env[1635]: time="2023-10-02T20:07:03.313024122Z" level=info msg="cleaning up dead shim" Oct 2 20:07:03.330908 env[1635]: time="2023-10-02T20:07:03.330854778Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3285 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:03.331611 env[1635]: time="2023-10-02T20:07:03.331380587Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 20:07:03.331926 env[1635]: time="2023-10-02T20:07:03.331830511Z" level=error msg="Failed to pipe stderr of container \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\"" error="reading from a closed fifo" Oct 2 20:07:03.335783 env[1635]: time="2023-10-02T20:07:03.335168359Z" level=error msg="Failed to pipe stdout of container \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\"" error="reading from a closed fifo" Oct 2 20:07:03.338805 env[1635]: time="2023-10-02T20:07:03.338713992Z" level=error msg="StartContainer for \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:03.339178 kubelet[2911]: E1002 20:07:03.339149 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0" Oct 2 20:07:03.339815 kubelet[2911]: E1002 20:07:03.339381 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:03.339815 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:03.339815 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:07:03.340109 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s9fz4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:03.340109 kubelet[2911]: E1002 20:07:03.339440 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:03.809859 env[1635]: time="2023-10-02T20:07:03.809805442Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:07:03.847506 kubelet[2911]: I1002 20:07:03.847445 2911 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-zfqjw" podStartSLOduration=13.84714835 podCreationTimestamp="2023-10-02 20:06:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:52.772913821 +0000 UTC m=+15.489834780" watchObservedRunningTime="2023-10-02 20:07:03.84714835 +0000 UTC m=+26.564069309" Oct 2 20:07:03.872831 env[1635]: time="2023-10-02T20:07:03.872682986Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\"" Oct 2 20:07:03.876051 env[1635]: time="2023-10-02T20:07:03.874060896Z" level=info msg="StartContainer for \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\"" Oct 2 20:07:03.923388 systemd[1]: Started cri-containerd-d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236.scope. Oct 2 20:07:03.955284 systemd[1]: cri-containerd-d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236.scope: Deactivated successfully. Oct 2 20:07:03.997579 env[1635]: time="2023-10-02T20:07:03.997518870Z" level=info msg="shim disconnected" id=d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236 Oct 2 20:07:03.997868 env[1635]: time="2023-10-02T20:07:03.997582934Z" level=warning msg="cleaning up after shim disconnected" id=d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236 namespace=k8s.io Oct 2 20:07:03.997868 env[1635]: time="2023-10-02T20:07:03.997595406Z" level=info msg="cleaning up dead shim" Oct 2 20:07:04.025842 env[1635]: time="2023-10-02T20:07:04.025763366Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3323 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:04.026406 env[1635]: time="2023-10-02T20:07:04.026335168Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 20:07:04.027375 env[1635]: time="2023-10-02T20:07:04.027323638Z" level=error msg="Failed to pipe stderr of container \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\"" error="reading from a closed fifo" Oct 2 20:07:04.027479 env[1635]: time="2023-10-02T20:07:04.027420474Z" level=error msg="Failed to pipe stdout of container \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\"" error="reading from a closed fifo" Oct 2 20:07:04.031635 env[1635]: time="2023-10-02T20:07:04.031575618Z" level=error msg="StartContainer for \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:04.031952 kubelet[2911]: E1002 20:07:04.031921 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236" Oct 2 20:07:04.032780 kubelet[2911]: E1002 20:07:04.032746 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:04.032780 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:04.032780 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:07:04.032780 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s9fz4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:04.033937 kubelet[2911]: E1002 20:07:04.032819 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:04.081667 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0-rootfs.mount: Deactivated successfully. Oct 2 20:07:04.213793 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount331924080.mount: Deactivated successfully. Oct 2 20:07:04.808408 kubelet[2911]: I1002 20:07:04.803481 2911 scope.go:115] "RemoveContainer" containerID="63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0" Oct 2 20:07:04.810880 kubelet[2911]: I1002 20:07:04.809954 2911 scope.go:115] "RemoveContainer" containerID="63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0" Oct 2 20:07:04.835544 env[1635]: time="2023-10-02T20:07:04.835503038Z" level=info msg="RemoveContainer for \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\"" Oct 2 20:07:04.845334 env[1635]: time="2023-10-02T20:07:04.844956325Z" level=info msg="RemoveContainer for \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\"" Oct 2 20:07:04.845507 env[1635]: time="2023-10-02T20:07:04.845449447Z" level=error msg="RemoveContainer for \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\" failed" error="failed to set removing state for container \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\": container is already in removing state" Oct 2 20:07:04.845980 kubelet[2911]: E1002 20:07:04.845958 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\": container is already in removing state" containerID="63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0" Oct 2 20:07:04.846107 kubelet[2911]: E1002 20:07:04.846022 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0": container is already in removing state; Skipping pod "cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)" Oct 2 20:07:04.846560 kubelet[2911]: E1002 20:07:04.846483 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:04.850808 env[1635]: time="2023-10-02T20:07:04.850746653Z" level=info msg="RemoveContainer for \"63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0\" returns successfully" Oct 2 20:07:05.546476 env[1635]: time="2023-10-02T20:07:05.546409879Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:05.549627 env[1635]: time="2023-10-02T20:07:05.549573693Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:05.552168 env[1635]: time="2023-10-02T20:07:05.552114046Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:05.552816 env[1635]: time="2023-10-02T20:07:05.552688327Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:07:05.557999 env[1635]: time="2023-10-02T20:07:05.556956314Z" level=info msg="CreateContainer within sandbox \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:07:05.577345 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount916787798.mount: Deactivated successfully. Oct 2 20:07:05.588586 env[1635]: time="2023-10-02T20:07:05.588535420Z" level=info msg="CreateContainer within sandbox \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\"" Oct 2 20:07:05.592603 env[1635]: time="2023-10-02T20:07:05.589900098Z" level=info msg="StartContainer for \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\"" Oct 2 20:07:05.648027 systemd[1]: Started cri-containerd-b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81.scope. Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.680066 kernel: audit: type=1400 audit(1696277225.667:1027): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.680220 kernel: audit: type=1400 audit(1696277225.667:1028): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.693933 kernel: audit: type=1400 audit(1696277225.667:1029): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.694027 kernel: audit: type=1400 audit(1696277225.667:1030): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.694060 kernel: audit: type=1400 audit(1696277225.667:1031): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.705605 kernel: audit: type=1400 audit(1696277225.667:1032): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.705849 kernel: audit: type=1400 audit(1696277225.667:1033): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.716563 kernel: audit: type=1400 audit(1696277225.667:1034): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.716704 kernel: audit: type=1400 audit(1696277225.667:1035): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit: BPF prog-id=130 op=LOAD Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3129 pid=3343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:05.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237636631333631653862393362323534313238356263326462343231 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3129 pid=3343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:05.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237636631333631653862393362323534313238356263326462343231 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.673000 audit: BPF prog-id=131 op=LOAD Oct 2 20:07:05.673000 audit[3343]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024e50 items=0 ppid=3129 pid=3343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:05.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237636631333631653862393362323534313238356263326462343231 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit: BPF prog-id=132 op=LOAD Oct 2 20:07:05.679000 audit[3343]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024e98 items=0 ppid=3129 pid=3343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:05.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237636631333631653862393362323534313238356263326462343231 Oct 2 20:07:05.679000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:07:05.679000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { perfmon } for pid=3343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit[3343]: AVC avc: denied { bpf } for pid=3343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:05.679000 audit: BPF prog-id=133 op=LOAD Oct 2 20:07:05.679000 audit[3343]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000252a8 items=0 ppid=3129 pid=3343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:05.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237636631333631653862393362323534313238356263326462343231 Oct 2 20:07:05.769410 env[1635]: time="2023-10-02T20:07:05.769345316Z" level=info msg="StartContainer for \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\" returns successfully" Oct 2 20:07:05.795000 audit[3353]: AVC avc: denied { map_create } for pid=3353 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c844 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c844 tclass=bpf permissive=0 Oct 2 20:07:05.795000 audit[3353]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006137d0 a2=48 a3=c0006137c0 items=0 ppid=3129 pid=3353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c844 key=(null) Oct 2 20:07:05.795000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:07:05.811356 kubelet[2911]: E1002 20:07:05.811111 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:05.892899 kubelet[2911]: I1002 20:07:05.892863 2911 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-m425v" podStartSLOduration=2.866261112 podCreationTimestamp="2023-10-02 20:06:50 +0000 UTC" firstStartedPulling="2023-10-02 20:06:52.527319983 +0000 UTC m=+15.244240933" lastFinishedPulling="2023-10-02 20:07:05.553848682 +0000 UTC m=+28.270769630" observedRunningTime="2023-10-02 20:07:05.828444505 +0000 UTC m=+28.545365464" watchObservedRunningTime="2023-10-02 20:07:05.892789809 +0000 UTC m=+28.609711083" Oct 2 20:07:06.437881 kubelet[2911]: W1002 20:07:06.437789 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice/cri-containerd-63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0.scope WatchSource:0}: container "63eb8cfc45852cd3e8ba44948ed6aae5e1049d6057bde571838e831e2bd4ecc0" in namespace "k8s.io": not found Oct 2 20:07:06.573179 systemd[1]: run-containerd-runc-k8s.io-b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81-runc.DWV7Ai.mount: Deactivated successfully. Oct 2 20:07:06.719237 sshd[3257]: Connection reset by 198.235.24.130 port 62532 [preauth] Oct 2 20:07:06.719757 systemd[1]: sshd@7-172.31.26.158:22-198.235.24.130:62532.service: Deactivated successfully. Oct 2 20:07:06.728170 kernel: kauditd_printk_skb: 51 callbacks suppressed Oct 2 20:07:06.728390 kernel: audit: type=1131 audit(1696277226.718:1046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.158:22-198.235.24.130:62532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:06.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.158:22-198.235.24.130:62532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.546026 kubelet[2911]: W1002 20:07:09.545983 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice/cri-containerd-d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236.scope WatchSource:0}: task d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236 not found: not found Oct 2 20:07:20.639720 env[1635]: time="2023-10-02T20:07:20.639480390Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:07:20.662129 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1080646271.mount: Deactivated successfully. Oct 2 20:07:20.679587 env[1635]: time="2023-10-02T20:07:20.679528562Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\"" Oct 2 20:07:20.680894 env[1635]: time="2023-10-02T20:07:20.680859288Z" level=info msg="StartContainer for \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\"" Oct 2 20:07:20.711438 systemd[1]: Started cri-containerd-858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d.scope. Oct 2 20:07:20.730608 systemd[1]: cri-containerd-858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d.scope: Deactivated successfully. Oct 2 20:07:20.766935 env[1635]: time="2023-10-02T20:07:20.766871387Z" level=info msg="shim disconnected" id=858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d Oct 2 20:07:20.766935 env[1635]: time="2023-10-02T20:07:20.766932723Z" level=warning msg="cleaning up after shim disconnected" id=858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d namespace=k8s.io Oct 2 20:07:20.767369 env[1635]: time="2023-10-02T20:07:20.766944476Z" level=info msg="cleaning up dead shim" Oct 2 20:07:20.776876 env[1635]: time="2023-10-02T20:07:20.776813909Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3399 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:20.777201 env[1635]: time="2023-10-02T20:07:20.777124561Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 20:07:20.777727 env[1635]: time="2023-10-02T20:07:20.777682434Z" level=error msg="Failed to pipe stdout of container \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\"" error="reading from a closed fifo" Oct 2 20:07:20.778422 env[1635]: time="2023-10-02T20:07:20.778378956Z" level=error msg="Failed to pipe stderr of container \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\"" error="reading from a closed fifo" Oct 2 20:07:20.784273 env[1635]: time="2023-10-02T20:07:20.784191335Z" level=error msg="StartContainer for \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:20.784512 kubelet[2911]: E1002 20:07:20.784480 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d" Oct 2 20:07:20.785322 kubelet[2911]: E1002 20:07:20.784604 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:20.785322 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:20.785322 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:07:20.785322 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s9fz4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:20.785322 kubelet[2911]: E1002 20:07:20.785232 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:20.846000 kubelet[2911]: I1002 20:07:20.845569 2911 scope.go:115] "RemoveContainer" containerID="d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236" Oct 2 20:07:20.846000 kubelet[2911]: I1002 20:07:20.845966 2911 scope.go:115] "RemoveContainer" containerID="d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236" Oct 2 20:07:20.847890 env[1635]: time="2023-10-02T20:07:20.847851077Z" level=info msg="RemoveContainer for \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\"" Oct 2 20:07:20.848797 env[1635]: time="2023-10-02T20:07:20.848734521Z" level=info msg="RemoveContainer for \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\"" Oct 2 20:07:20.848990 env[1635]: time="2023-10-02T20:07:20.848837757Z" level=error msg="RemoveContainer for \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\" failed" error="failed to set removing state for container \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\": container is already in removing state" Oct 2 20:07:20.849561 kubelet[2911]: E1002 20:07:20.849159 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\": container is already in removing state" containerID="d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236" Oct 2 20:07:20.849561 kubelet[2911]: E1002 20:07:20.849193 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236": container is already in removing state; Skipping pod "cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)" Oct 2 20:07:20.851302 kubelet[2911]: E1002 20:07:20.849809 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:20.860470 env[1635]: time="2023-10-02T20:07:20.860423471Z" level=info msg="RemoveContainer for \"d73a0a32eaa9b4595b80f6909f61daf0a6d7f4a10c3533afdf6ca41a5da0a236\" returns successfully" Oct 2 20:07:21.658516 systemd[1]: run-containerd-runc-k8s.io-858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d-runc.dPkkrK.mount: Deactivated successfully. Oct 2 20:07:21.658650 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d-rootfs.mount: Deactivated successfully. Oct 2 20:07:23.907336 kubelet[2911]: W1002 20:07:23.907296 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice/cri-containerd-858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d.scope WatchSource:0}: task 858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d not found: not found Oct 2 20:07:31.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.158:22-139.178.89.65:33456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:31.379050 systemd[1]: Started sshd@8-172.31.26.158:22-139.178.89.65:33456.service. Oct 2 20:07:31.385434 kernel: audit: type=1130 audit(1696277251.378:1047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.158:22-139.178.89.65:33456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:31.443000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:31.443000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:31.458280 kernel: audit: type=1400 audit(1696277251.443:1049): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:31.458411 kernel: audit: type=1400 audit(1696277251.443:1048): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:31.458461 kernel: audit: type=1300 audit(1696277251.443:1049): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025124e0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:31.443000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025124e0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:31.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:31.472036 kernel: audit: type=1327 audit(1696277251.443:1049): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:31.443000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025808a0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:31.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:31.487724 kernel: audit: type=1300 audit(1696277251.443:1048): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025808a0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:31.487845 kernel: audit: type=1327 audit(1696277251.443:1048): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:31.585000 audit[3414]: USER_ACCT pid=3414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.587107 sshd[3414]: Accepted publickey for core from 139.178.89.65 port 33456 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:31.595000 audit[3414]: CRED_ACQ pid=3414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.598191 sshd[3414]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:31.603860 kernel: audit: type=1101 audit(1696277251.585:1050): pid=3414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.604122 kernel: audit: type=1103 audit(1696277251.595:1051): pid=3414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.604171 kernel: audit: type=1006 audit(1696277251.596:1052): pid=3414 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 20:07:31.596000 audit[3414]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffae2a6630 a2=3 a3=0 items=0 ppid=1 pid=3414 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:31.596000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:31.609232 systemd-logind[1628]: New session 8 of user core. Oct 2 20:07:31.609886 systemd[1]: Started session-8.scope. Oct 2 20:07:31.618000 audit[3414]: USER_START pid=3414 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.620000 audit[3416]: CRED_ACQ pid=3416 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.645324 kubelet[2911]: E1002 20:07:31.645284 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:32.032958 sshd[3414]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:32.034000 audit[3414]: USER_END pid=3414 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.034000 audit[3414]: CRED_DISP pid=3414 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.039085 systemd-logind[1628]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:07:32.039321 systemd[1]: sshd@8-172.31.26.158:22-139.178.89.65:33456.service: Deactivated successfully. Oct 2 20:07:32.040492 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:07:32.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.158:22-139.178.89.65:33456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:32.041840 systemd-logind[1628]: Removed session 8. Oct 2 20:07:33.469000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:33.469000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:33.469000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0084a91d0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:07:33.469000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:33.469000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c008afba80 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:07:33.469000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:33.471000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:33.471000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0084a9260 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:07:33.471000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:33.501000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:33.501000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0084a9440 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:07:33.501000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:33.671000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:33.671000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0084a9470 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:07:33.671000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:33.713000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:33.713000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c008afbd60 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:07:33.713000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:42.060439 systemd[1]: Started sshd@9-172.31.26.158:22-139.178.89.65:36086.service. Oct 2 20:07:42.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.158:22-139.178.89.65:36086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.065826 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:07:42.065916 kernel: audit: type=1130 audit(1696277262.062:1064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.158:22-139.178.89.65:36086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.245000 audit[3429]: USER_ACCT pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.252498 sshd[3429]: Accepted publickey for core from 139.178.89.65 port 36086 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:42.253277 kernel: audit: type=1101 audit(1696277262.245:1065): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.253000 audit[3429]: CRED_ACQ pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.254377 sshd[3429]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:42.262891 kernel: audit: type=1103 audit(1696277262.253:1066): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.263015 kernel: audit: type=1006 audit(1696277262.253:1067): pid=3429 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 20:07:42.253000 audit[3429]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5a1f5430 a2=3 a3=0 items=0 ppid=1 pid=3429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:42.268952 kernel: audit: type=1300 audit(1696277262.253:1067): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5a1f5430 a2=3 a3=0 items=0 ppid=1 pid=3429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:42.269495 kernel: audit: type=1327 audit(1696277262.253:1067): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:42.253000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:42.275950 systemd[1]: Started session-9.scope. Oct 2 20:07:42.276630 systemd-logind[1628]: New session 9 of user core. Oct 2 20:07:42.289000 audit[3429]: USER_START pid=3429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.297263 kernel: audit: type=1105 audit(1696277262.289:1068): pid=3429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.298519 kernel: audit: type=1103 audit(1696277262.297:1069): pid=3431 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.297000 audit[3431]: CRED_ACQ pid=3431 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.513500 sshd[3429]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:42.514000 audit[3429]: USER_END pid=3429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.522269 kernel: audit: type=1106 audit(1696277262.514:1070): pid=3429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.522384 systemd[1]: sshd@9-172.31.26.158:22-139.178.89.65:36086.service: Deactivated successfully. Oct 2 20:07:42.523494 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:07:42.514000 audit[3429]: CRED_DISP pid=3429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.527394 systemd-logind[1628]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:07:42.528665 systemd-logind[1628]: Removed session 9. Oct 2 20:07:42.530279 kernel: audit: type=1104 audit(1696277262.514:1071): pid=3429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.158:22-139.178.89.65:36086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:46.635337 env[1635]: time="2023-10-02T20:07:46.635291672Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:07:46.668926 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3330968622.mount: Deactivated successfully. Oct 2 20:07:46.678309 env[1635]: time="2023-10-02T20:07:46.678232002Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\"" Oct 2 20:07:46.679074 env[1635]: time="2023-10-02T20:07:46.679039386Z" level=info msg="StartContainer for \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\"" Oct 2 20:07:46.745740 systemd[1]: Started cri-containerd-4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855.scope. Oct 2 20:07:46.767043 systemd[1]: cri-containerd-4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855.scope: Deactivated successfully. Oct 2 20:07:46.798431 env[1635]: time="2023-10-02T20:07:46.798343613Z" level=info msg="shim disconnected" id=4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855 Oct 2 20:07:46.798935 env[1635]: time="2023-10-02T20:07:46.798874931Z" level=warning msg="cleaning up after shim disconnected" id=4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855 namespace=k8s.io Oct 2 20:07:46.798935 env[1635]: time="2023-10-02T20:07:46.798921927Z" level=info msg="cleaning up dead shim" Oct 2 20:07:46.814129 env[1635]: time="2023-10-02T20:07:46.814074069Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3467 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:46.814494 env[1635]: time="2023-10-02T20:07:46.814425845Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 20:07:46.814845 env[1635]: time="2023-10-02T20:07:46.814803211Z" level=error msg="Failed to pipe stderr of container \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\"" error="reading from a closed fifo" Oct 2 20:07:46.815553 env[1635]: time="2023-10-02T20:07:46.815501844Z" level=error msg="Failed to pipe stdout of container \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\"" error="reading from a closed fifo" Oct 2 20:07:46.818657 env[1635]: time="2023-10-02T20:07:46.818603574Z" level=error msg="StartContainer for \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:46.819007 kubelet[2911]: E1002 20:07:46.818956 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855" Oct 2 20:07:46.819533 kubelet[2911]: E1002 20:07:46.819150 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:46.819533 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:46.819533 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:07:46.819533 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s9fz4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:46.819533 kubelet[2911]: E1002 20:07:46.819205 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:46.938197 kubelet[2911]: I1002 20:07:46.938166 2911 scope.go:115] "RemoveContainer" containerID="858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d" Oct 2 20:07:46.939816 kubelet[2911]: I1002 20:07:46.939796 2911 scope.go:115] "RemoveContainer" containerID="858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d" Oct 2 20:07:46.944922 env[1635]: time="2023-10-02T20:07:46.944876456Z" level=info msg="RemoveContainer for \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\"" Oct 2 20:07:46.946671 env[1635]: time="2023-10-02T20:07:46.946635145Z" level=info msg="RemoveContainer for \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\"" Oct 2 20:07:46.946854 env[1635]: time="2023-10-02T20:07:46.946790072Z" level=error msg="RemoveContainer for \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\" failed" error="failed to set removing state for container \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\": container is already in removing state" Oct 2 20:07:46.947182 kubelet[2911]: E1002 20:07:46.947163 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\": container is already in removing state" containerID="858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d" Oct 2 20:07:46.947425 kubelet[2911]: E1002 20:07:46.947411 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d": container is already in removing state; Skipping pod "cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)" Oct 2 20:07:46.948522 kubelet[2911]: E1002 20:07:46.948477 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:07:46.956437 env[1635]: time="2023-10-02T20:07:46.953494028Z" level=info msg="RemoveContainer for \"858c2e0c99768af4972c57520fdd01a3c28d375b2a03a862f3d56ac6f1b1b87d\" returns successfully" Oct 2 20:07:47.653161 systemd[1]: run-containerd-runc-k8s.io-4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855-runc.BZ3jna.mount: Deactivated successfully. Oct 2 20:07:47.653418 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855-rootfs.mount: Deactivated successfully. Oct 2 20:07:47.918047 update_engine[1629]: I1002 20:07:47.917600 1629 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:07:47.918047 update_engine[1629]: I1002 20:07:47.917665 1629 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:07:47.925488 update_engine[1629]: I1002 20:07:47.925451 1629 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:07:47.925948 update_engine[1629]: I1002 20:07:47.925901 1629 omaha_request_params.cc:62] Current group set to lts Oct 2 20:07:47.931198 update_engine[1629]: I1002 20:07:47.930848 1629 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:07:47.931198 update_engine[1629]: I1002 20:07:47.930871 1629 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:07:47.931198 update_engine[1629]: I1002 20:07:47.930892 1629 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:07:47.931198 update_engine[1629]: I1002 20:07:47.930950 1629 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:07:47.931198 update_engine[1629]: I1002 20:07:47.931115 1629 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:07:47.931198 update_engine[1629]: I1002 20:07:47.931124 1629 omaha_request_action.cc:269] Request: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: Oct 2 20:07:47.931198 update_engine[1629]: I1002 20:07:47.931129 1629 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:07:47.944383 update_engine[1629]: I1002 20:07:47.944348 1629 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:07:47.944587 update_engine[1629]: I1002 20:07:47.944566 1629 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:07:47.956707 locksmithd[1686]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:07:48.142000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.146532 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:48.146643 kernel: audit: type=1400 audit(1696277268.142:1073): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.142000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.157966 kernel: audit: type=1400 audit(1696277268.142:1074): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.158143 kernel: audit: type=1300 audit(1696277268.142:1073): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bea000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:48.142000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bea000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:48.142000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002098000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:48.175121 kernel: audit: type=1300 audit(1696277268.142:1074): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002098000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:48.175276 kernel: audit: type=1327 audit(1696277268.142:1073): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:48.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:48.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:48.142000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.195556 kernel: audit: type=1327 audit(1696277268.142:1074): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:48.195753 kernel: audit: type=1400 audit(1696277268.142:1075): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.195789 kernel: audit: type=1300 audit(1696277268.142:1075): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002098020 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:48.142000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002098020 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:48.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:48.212058 kernel: audit: type=1327 audit(1696277268.142:1075): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:48.212206 kernel: audit: type=1400 audit(1696277268.144:1076): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.144000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:48.144000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bea2c0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:07:48.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:49.114525 update_engine[1629]: I1002 20:07:49.114423 1629 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:07:49.115135 update_engine[1629]: I1002 20:07:49.115034 1629 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:07:49.116863 update_engine[1629]: I1002 20:07:49.116839 1629 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:07:49.430823 update_engine[1629]: I1002 20:07:49.430768 1629 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:07:49.432534 update_engine[1629]: I1002 20:07:49.432497 1629 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:07:49.432534 update_engine[1629]: I1002 20:07:49.432520 1629 omaha_request_action.cc:619] Omaha request response: Oct 2 20:07:49.432534 update_engine[1629]: Oct 2 20:07:49.448136 update_engine[1629]: I1002 20:07:49.448091 1629 omaha_request_action.cc:409] No update. Oct 2 20:07:49.448136 update_engine[1629]: I1002 20:07:49.448139 1629 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:07:49.448136 update_engine[1629]: I1002 20:07:49.448145 1629 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:07:49.448414 update_engine[1629]: I1002 20:07:49.448151 1629 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:07:49.448414 update_engine[1629]: I1002 20:07:49.448156 1629 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:07:49.448414 update_engine[1629]: I1002 20:07:49.448160 1629 update_attempter.cc:302] Processing Done. Oct 2 20:07:49.448414 update_engine[1629]: I1002 20:07:49.448177 1629 update_attempter.cc:338] No update. Oct 2 20:07:49.448414 update_engine[1629]: I1002 20:07:49.448192 1629 update_check_scheduler.cc:74] Next update check in 48m24s Oct 2 20:07:49.448605 locksmithd[1686]: LastCheckedTime=1696277269 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:07:49.905516 kubelet[2911]: W1002 20:07:49.905474 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice/cri-containerd-4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855.scope WatchSource:0}: task 4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855 not found: not found Oct 2 20:07:52.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.26.158:22-139.178.89.65:55606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:52.540506 systemd[1]: Started sshd@10-172.31.26.158:22-139.178.89.65:55606.service. Oct 2 20:07:52.714000 audit[3484]: USER_ACCT pid=3484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.716374 sshd[3484]: Accepted publickey for core from 139.178.89.65 port 55606 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:52.716000 audit[3484]: CRED_ACQ pid=3484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.716000 audit[3484]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeed4c2520 a2=3 a3=0 items=0 ppid=1 pid=3484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:52.716000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:52.718173 sshd[3484]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:52.724367 systemd-logind[1628]: New session 10 of user core. Oct 2 20:07:52.725097 systemd[1]: Started session-10.scope. Oct 2 20:07:52.731000 audit[3484]: USER_START pid=3484 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.732000 audit[3486]: CRED_ACQ pid=3486 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.941995 sshd[3484]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:52.943000 audit[3484]: USER_END pid=3484 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.943000 audit[3484]: CRED_DISP pid=3484 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.946827 systemd[1]: sshd@10-172.31.26.158:22-139.178.89.65:55606.service: Deactivated successfully. Oct 2 20:07:52.947878 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:07:52.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.26.158:22-139.178.89.65:55606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:52.949314 systemd-logind[1628]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:07:52.950366 systemd-logind[1628]: Removed session 10. Oct 2 20:07:58.633605 kubelet[2911]: E1002 20:07:58.633571 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:08:02.990191 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:08:02.990849 kernel: audit: type=1130 audit(1696277282.973:1086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.26.158:22-139.178.89.65:53744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:02.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.26.158:22-139.178.89.65:53744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:02.974202 systemd[1]: Started sshd@11-172.31.26.158:22-139.178.89.65:53744.service. Oct 2 20:08:03.172000 audit[3497]: USER_ACCT pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.181239 sshd[3497]: Accepted publickey for core from 139.178.89.65 port 53744 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:03.181705 kernel: audit: type=1101 audit(1696277283.172:1087): pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.181000 audit[3497]: CRED_ACQ pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.183835 sshd[3497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:03.193767 kernel: audit: type=1103 audit(1696277283.181:1088): pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.193904 kernel: audit: type=1006 audit(1696277283.181:1089): pid=3497 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:08:03.181000 audit[3497]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7c520900 a2=3 a3=0 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:03.223875 kernel: audit: type=1300 audit(1696277283.181:1089): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7c520900 a2=3 a3=0 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:03.223980 kernel: audit: type=1327 audit(1696277283.181:1089): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:03.181000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:03.220886 systemd[1]: Started session-11.scope. Oct 2 20:08:03.232195 systemd-logind[1628]: New session 11 of user core. Oct 2 20:08:03.241000 audit[3497]: USER_START pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.252265 kernel: audit: type=1105 audit(1696277283.241:1090): pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.243000 audit[3499]: CRED_ACQ pid=3499 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.263507 kernel: audit: type=1103 audit(1696277283.243:1091): pid=3499 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.479570 sshd[3497]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:03.479000 audit[3497]: USER_END pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.484000 audit[3497]: CRED_DISP pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.489123 systemd[1]: sshd@11-172.31.26.158:22-139.178.89.65:53744.service: Deactivated successfully. Oct 2 20:08:03.490332 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:08:03.493069 systemd-logind[1628]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:08:03.494049 kernel: audit: type=1106 audit(1696277283.479:1092): pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.494121 kernel: audit: type=1104 audit(1696277283.484:1093): pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.26.158:22-139.178.89.65:53744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:03.494931 systemd-logind[1628]: Removed session 11. Oct 2 20:08:10.633563 kubelet[2911]: E1002 20:08:10.633518 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:08:13.513424 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:13.513647 kernel: audit: type=1130 audit(1696277293.507:1095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.158:22-139.178.89.65:36520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:13.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.158:22-139.178.89.65:36520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:13.508478 systemd[1]: Started sshd@12-172.31.26.158:22-139.178.89.65:36520.service. Oct 2 20:08:13.692000 audit[3510]: USER_ACCT pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.694012 sshd[3510]: Accepted publickey for core from 139.178.89.65 port 36520 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:13.698000 audit[3510]: CRED_ACQ pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.700525 sshd[3510]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:13.705522 kernel: audit: type=1101 audit(1696277293.692:1096): pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.705633 kernel: audit: type=1103 audit(1696277293.698:1097): pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.709175 kernel: audit: type=1006 audit(1696277293.698:1098): pid=3510 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:08:13.698000 audit[3510]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffaaf7c910 a2=3 a3=0 items=0 ppid=1 pid=3510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:13.698000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:13.717334 kernel: audit: type=1300 audit(1696277293.698:1098): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffaaf7c910 a2=3 a3=0 items=0 ppid=1 pid=3510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:13.717427 kernel: audit: type=1327 audit(1696277293.698:1098): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:13.720974 systemd-logind[1628]: New session 12 of user core. Oct 2 20:08:13.721631 systemd[1]: Started session-12.scope. Oct 2 20:08:13.728000 audit[3510]: USER_START pid=3510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.738002 kernel: audit: type=1105 audit(1696277293.728:1099): pid=3510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.738107 kernel: audit: type=1103 audit(1696277293.736:1100): pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.736000 audit[3512]: CRED_ACQ pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.950020 sshd[3510]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:13.950000 audit[3510]: USER_END pid=3510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.952000 audit[3510]: CRED_DISP pid=3510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.964763 kernel: audit: type=1106 audit(1696277293.950:1101): pid=3510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.964876 kernel: audit: type=1104 audit(1696277293.952:1102): pid=3510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.965168 systemd[1]: sshd@12-172.31.26.158:22-139.178.89.65:36520.service: Deactivated successfully. Oct 2 20:08:13.966210 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:08:13.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.158:22-139.178.89.65:36520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:13.967849 systemd-logind[1628]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:08:13.969256 systemd-logind[1628]: Removed session 12. Oct 2 20:08:21.634384 kubelet[2911]: E1002 20:08:21.634350 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:08:23.979935 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:23.980347 kernel: audit: type=1130 audit(1696277303.976:1104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.158:22-139.178.89.65:49230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:23.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.158:22-139.178.89.65:49230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:23.977716 systemd[1]: Started sshd@13-172.31.26.158:22-139.178.89.65:49230.service. Oct 2 20:08:24.173000 audit[3525]: USER_ACCT pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.185736 kernel: audit: type=1101 audit(1696277304.173:1105): pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.185783 sshd[3525]: Accepted publickey for core from 139.178.89.65 port 49230 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:24.185000 audit[3525]: CRED_ACQ pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.187867 sshd[3525]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:24.200192 systemd[1]: Started session-13.scope. Oct 2 20:08:24.202392 kernel: audit: type=1103 audit(1696277304.185:1106): pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.202478 kernel: audit: type=1006 audit(1696277304.185:1107): pid=3525 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:08:24.202686 kernel: audit: type=1300 audit(1696277304.185:1107): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff04f601c0 a2=3 a3=0 items=0 ppid=1 pid=3525 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:24.185000 audit[3525]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff04f601c0 a2=3 a3=0 items=0 ppid=1 pid=3525 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:24.204904 systemd-logind[1628]: New session 13 of user core. Oct 2 20:08:24.211419 kernel: audit: type=1327 audit(1696277304.185:1107): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:24.185000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:24.213000 audit[3525]: USER_START pid=3525 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.217000 audit[3527]: CRED_ACQ pid=3527 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.231230 kernel: audit: type=1105 audit(1696277304.213:1108): pid=3525 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.231502 kernel: audit: type=1103 audit(1696277304.217:1109): pid=3527 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.459929 sshd[3525]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:24.460000 audit[3525]: USER_END pid=3525 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.465268 systemd-logind[1628]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:08:24.467318 systemd[1]: sshd@13-172.31.26.158:22-139.178.89.65:49230.service: Deactivated successfully. Oct 2 20:08:24.460000 audit[3525]: CRED_DISP pid=3525 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.468498 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:08:24.472679 systemd-logind[1628]: Removed session 13. Oct 2 20:08:24.476638 kernel: audit: type=1106 audit(1696277304.460:1110): pid=3525 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.476802 kernel: audit: type=1104 audit(1696277304.460:1111): pid=3525 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.158:22-139.178.89.65:49230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:31.445000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:31.447757 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:31.447857 kernel: audit: type=1400 audit(1696277311.445:1113): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:31.445000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c99110 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:31.482278 kernel: audit: type=1300 audit(1696277311.445:1113): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c99110 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:31.482416 kernel: audit: type=1327 audit(1696277311.445:1113): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:31.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:31.450000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:31.493860 kernel: audit: type=1400 audit(1696277311.450:1114): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:31.494011 kernel: audit: type=1300 audit(1696277311.450:1114): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d8f080 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:31.450000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d8f080 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:31.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:31.508651 kernel: audit: type=1327 audit(1696277311.450:1114): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:33.469000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.469000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f76c2d0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:08:33.488477 kernel: audit: type=1400 audit(1696277313.469:1115): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.488635 kernel: audit: type=1300 audit(1696277313.469:1115): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f76c2d0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:08:33.488676 kernel: audit: type=1327 audit(1696277313.469:1115): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:33.469000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:33.470000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.503421 kernel: audit: type=1400 audit(1696277313.470:1116): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.470000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f663240 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:08:33.470000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:33.471000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.471000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f5699e0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:08:33.471000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:33.501000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.501000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f569b00 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:08:33.501000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:33.672000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.672000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f76c360 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:08:33.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:33.713000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:33.713000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f6634a0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:08:33.713000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:34.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.26.158:22-139.178.89.65:50232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:34.488994 systemd[1]: Started sshd@14-172.31.26.158:22-139.178.89.65:50232.service. Oct 2 20:08:34.653000 audit[3538]: USER_ACCT pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.654664 sshd[3538]: Accepted publickey for core from 139.178.89.65 port 50232 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:34.654000 audit[3538]: CRED_ACQ pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.654000 audit[3538]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe03312110 a2=3 a3=0 items=0 ppid=1 pid=3538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:34.654000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:34.656140 sshd[3538]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:34.663456 systemd[1]: Started session-14.scope. Oct 2 20:08:34.664020 systemd-logind[1628]: New session 14 of user core. Oct 2 20:08:34.673000 audit[3538]: USER_START pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.675000 audit[3540]: CRED_ACQ pid=3540 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.887997 sshd[3538]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:34.888000 audit[3538]: USER_END pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.889000 audit[3538]: CRED_DISP pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.26.158:22-139.178.89.65:50232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:34.891885 systemd[1]: sshd@14-172.31.26.158:22-139.178.89.65:50232.service: Deactivated successfully. Oct 2 20:08:34.892852 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:08:34.895171 systemd-logind[1628]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:08:34.896456 systemd-logind[1628]: Removed session 14. Oct 2 20:08:36.638596 env[1635]: time="2023-10-02T20:08:36.638553058Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:08:36.656571 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount989153522.mount: Deactivated successfully. Oct 2 20:08:36.666708 env[1635]: time="2023-10-02T20:08:36.666629325Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\"" Oct 2 20:08:36.672898 env[1635]: time="2023-10-02T20:08:36.667874047Z" level=info msg="StartContainer for \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\"" Oct 2 20:08:36.709769 systemd[1]: Started cri-containerd-0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a.scope. Oct 2 20:08:36.723158 systemd[1]: cri-containerd-0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a.scope: Deactivated successfully. Oct 2 20:08:36.740341 env[1635]: time="2023-10-02T20:08:36.740217667Z" level=info msg="shim disconnected" id=0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a Oct 2 20:08:36.740341 env[1635]: time="2023-10-02T20:08:36.740342700Z" level=warning msg="cleaning up after shim disconnected" id=0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a namespace=k8s.io Oct 2 20:08:36.740663 env[1635]: time="2023-10-02T20:08:36.740355271Z" level=info msg="cleaning up dead shim" Oct 2 20:08:36.749767 env[1635]: time="2023-10-02T20:08:36.749704901Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3574 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:36.750061 env[1635]: time="2023-10-02T20:08:36.750000679Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 20:08:36.753358 env[1635]: time="2023-10-02T20:08:36.753306783Z" level=error msg="Failed to pipe stdout of container \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\"" error="reading from a closed fifo" Oct 2 20:08:36.755470 env[1635]: time="2023-10-02T20:08:36.755428159Z" level=error msg="Failed to pipe stderr of container \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\"" error="reading from a closed fifo" Oct 2 20:08:36.757840 env[1635]: time="2023-10-02T20:08:36.757792702Z" level=error msg="StartContainer for \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:36.759536 kubelet[2911]: E1002 20:08:36.759505 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a" Oct 2 20:08:36.760082 kubelet[2911]: E1002 20:08:36.759638 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:36.760082 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:36.760082 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:08:36.760082 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s9fz4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:36.760082 kubelet[2911]: E1002 20:08:36.759692 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:08:37.087120 kubelet[2911]: I1002 20:08:37.085918 2911 scope.go:115] "RemoveContainer" containerID="4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855" Oct 2 20:08:37.087446 kubelet[2911]: I1002 20:08:37.087428 2911 scope.go:115] "RemoveContainer" containerID="4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855" Oct 2 20:08:37.091710 env[1635]: time="2023-10-02T20:08:37.091645717Z" level=info msg="RemoveContainer for \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\"" Oct 2 20:08:37.104268 env[1635]: time="2023-10-02T20:08:37.102860992Z" level=info msg="RemoveContainer for \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\"" Oct 2 20:08:37.104268 env[1635]: time="2023-10-02T20:08:37.102974852Z" level=error msg="RemoveContainer for \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\" failed" error="rpc error: code = NotFound desc = get container info: container \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\" in namespace \"k8s.io\": not found" Oct 2 20:08:37.104455 kubelet[2911]: E1002 20:08:37.103295 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\" in namespace \"k8s.io\": not found" containerID="4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855" Oct 2 20:08:37.104455 kubelet[2911]: E1002 20:08:37.103337 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855" in namespace "k8s.io": not found; Skipping pod "cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)" Oct 2 20:08:37.104455 kubelet[2911]: E1002 20:08:37.103699 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:08:37.105379 env[1635]: time="2023-10-02T20:08:37.105342148Z" level=info msg="RemoveContainer for \"4eb5b3b9a6a3aa849838fb98f524eceb3bf73045b2ca28bcd4b2bac364b1b855\" returns successfully" Oct 2 20:08:37.556054 kubelet[2911]: E1002 20:08:37.555978 2911 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:08:37.650833 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a-rootfs.mount: Deactivated successfully. Oct 2 20:08:37.762958 kubelet[2911]: E1002 20:08:37.762932 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:39.852374 kubelet[2911]: W1002 20:08:39.852316 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice/cri-containerd-0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a.scope WatchSource:0}: task 0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a not found: not found Oct 2 20:08:42.765555 kubelet[2911]: E1002 20:08:42.765070 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:44.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.26.158:22-139.178.89.65:33474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:44.915991 systemd[1]: Started sshd@15-172.31.26.158:22-139.178.89.65:33474.service. Oct 2 20:08:44.917679 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:08:44.917734 kernel: audit: type=1130 audit(1696277324.914:1130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.26.158:22-139.178.89.65:33474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:45.109000 audit[3589]: USER_ACCT pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.117058 sshd[3589]: Accepted publickey for core from 139.178.89.65 port 33474 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:45.117531 kernel: audit: type=1101 audit(1696277325.109:1131): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.116000 audit[3589]: CRED_ACQ pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.119121 sshd[3589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:45.124414 kernel: audit: type=1103 audit(1696277325.116:1132): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.136337 kernel: audit: type=1006 audit(1696277325.116:1133): pid=3589 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:08:45.136475 kernel: audit: type=1300 audit(1696277325.116:1133): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfdf36200 a2=3 a3=0 items=0 ppid=1 pid=3589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:45.116000 audit[3589]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfdf36200 a2=3 a3=0 items=0 ppid=1 pid=3589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:45.130053 systemd[1]: Started session-15.scope. Oct 2 20:08:45.131457 systemd-logind[1628]: New session 15 of user core. Oct 2 20:08:45.116000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:45.139000 audit[3589]: USER_START pid=3589 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.147549 kernel: audit: type=1327 audit(1696277325.116:1133): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:45.147650 kernel: audit: type=1105 audit(1696277325.139:1134): pid=3589 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.139000 audit[3591]: CRED_ACQ pid=3591 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.153066 kernel: audit: type=1103 audit(1696277325.139:1135): pid=3591 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.383556 sshd[3589]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:45.384000 audit[3589]: USER_END pid=3589 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.388685 systemd[1]: sshd@15-172.31.26.158:22-139.178.89.65:33474.service: Deactivated successfully. Oct 2 20:08:45.389467 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:08:45.392227 systemd-logind[1628]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:08:45.393278 kernel: audit: type=1106 audit(1696277325.384:1136): pid=3589 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.393387 kernel: audit: type=1104 audit(1696277325.384:1137): pid=3589 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.384000 audit[3589]: CRED_DISP pid=3589 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.393833 systemd-logind[1628]: Removed session 15. Oct 2 20:08:45.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.26.158:22-139.178.89.65:33474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:47.765957 kubelet[2911]: E1002 20:08:47.765926 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:48.144000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:48.144000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:48.144000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b4b200 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:48.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:48.144000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00117e320 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:48.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:48.145000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:48.145000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b4b220 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:48.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:48.149000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:48.149000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b4b360 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:08:48.149000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:51.634153 kubelet[2911]: E1002 20:08:51.634117 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:08:52.766678 kubelet[2911]: E1002 20:08:52.766648 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:55.413290 systemd[1]: Started sshd@16-172.31.26.158:22-139.178.89.65:38936.service. Oct 2 20:08:55.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.26.158:22-139.178.89.65:38936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:55.417264 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:08:55.417557 kernel: audit: type=1130 audit(1696277335.413:1143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.26.158:22-139.178.89.65:38936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:55.604000 audit[3604]: USER_ACCT pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.611696 sshd[3604]: Accepted publickey for core from 139.178.89.65 port 38936 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:55.612528 kernel: audit: type=1101 audit(1696277335.604:1144): pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.612000 audit[3604]: CRED_ACQ pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.613586 sshd[3604]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:55.622346 systemd[1]: Started session-16.scope. Oct 2 20:08:55.623918 kernel: audit: type=1103 audit(1696277335.612:1145): pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.624020 kernel: audit: type=1006 audit(1696277335.612:1146): pid=3604 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:08:55.624606 kernel: audit: type=1300 audit(1696277335.612:1146): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2cbbe220 a2=3 a3=0 items=0 ppid=1 pid=3604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:55.612000 audit[3604]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2cbbe220 a2=3 a3=0 items=0 ppid=1 pid=3604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:55.624122 systemd-logind[1628]: New session 16 of user core. Oct 2 20:08:55.612000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:55.633000 audit[3604]: USER_START pid=3604 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.645271 kernel: audit: type=1327 audit(1696277335.612:1146): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:55.645487 kernel: audit: type=1105 audit(1696277335.633:1147): pid=3604 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.645525 kernel: audit: type=1103 audit(1696277335.635:1148): pid=3606 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.635000 audit[3606]: CRED_ACQ pid=3606 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.834905 sshd[3604]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:55.836000 audit[3604]: USER_END pid=3604 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.836000 audit[3604]: CRED_DISP pid=3604 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.847297 systemd[1]: sshd@16-172.31.26.158:22-139.178.89.65:38936.service: Deactivated successfully. Oct 2 20:08:55.848278 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:08:55.850211 systemd-logind[1628]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:08:55.852743 kernel: audit: type=1106 audit(1696277335.836:1149): pid=3604 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.852837 kernel: audit: type=1104 audit(1696277335.836:1150): pid=3604 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.26.158:22-139.178.89.65:38936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:55.853317 systemd-logind[1628]: Removed session 16. Oct 2 20:08:57.767667 kubelet[2911]: E1002 20:08:57.767633 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:02.768731 kubelet[2911]: E1002 20:09:02.768684 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:04.633262 kubelet[2911]: E1002 20:09:04.633214 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:09:05.863260 systemd[1]: Started sshd@17-172.31.26.158:22-139.178.89.65:36200.service. Oct 2 20:09:05.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.26.158:22-139.178.89.65:36200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:05.864845 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:05.864944 kernel: audit: type=1130 audit(1696277345.863:1152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.26.158:22-139.178.89.65:36200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.063000 audit[3616]: USER_ACCT pid=3616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.076580 kernel: audit: type=1101 audit(1696277346.063:1153): pid=3616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.076725 sshd[3616]: Accepted publickey for core from 139.178.89.65 port 36200 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:06.077000 audit[3616]: CRED_ACQ pid=3616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.081550 sshd[3616]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:06.097334 kernel: audit: type=1103 audit(1696277346.077:1154): pid=3616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.097533 kernel: audit: type=1006 audit(1696277346.077:1155): pid=3616 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:09:06.097573 kernel: audit: type=1300 audit(1696277346.077:1155): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd81a36e0 a2=3 a3=0 items=0 ppid=1 pid=3616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.077000 audit[3616]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd81a36e0 a2=3 a3=0 items=0 ppid=1 pid=3616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.077000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.110305 kernel: audit: type=1327 audit(1696277346.077:1155): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.118367 systemd-logind[1628]: New session 17 of user core. Oct 2 20:09:06.123430 systemd[1]: Started session-17.scope. Oct 2 20:09:06.132000 audit[3616]: USER_START pid=3616 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.132000 audit[3618]: CRED_ACQ pid=3618 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.144819 kernel: audit: type=1105 audit(1696277346.132:1156): pid=3616 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.144930 kernel: audit: type=1103 audit(1696277346.132:1157): pid=3618 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.344969 sshd[3616]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:06.346000 audit[3616]: USER_END pid=3616 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.354271 kernel: audit: type=1106 audit(1696277346.346:1158): pid=3616 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.353000 audit[3616]: CRED_DISP pid=3616 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.360273 kernel: audit: type=1104 audit(1696277346.353:1159): pid=3616 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.361593 systemd[1]: sshd@17-172.31.26.158:22-139.178.89.65:36200.service: Deactivated successfully. Oct 2 20:09:06.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.26.158:22-139.178.89.65:36200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.362802 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:09:06.363585 systemd-logind[1628]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:09:06.364502 systemd-logind[1628]: Removed session 17. Oct 2 20:09:06.372696 systemd[1]: Started sshd@18-172.31.26.158:22-139.178.89.65:36202.service. Oct 2 20:09:06.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.26.158:22-139.178.89.65:36202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.537000 audit[3629]: USER_ACCT pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.538330 sshd[3629]: Accepted publickey for core from 139.178.89.65 port 36202 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:06.539000 audit[3629]: CRED_ACQ pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.539000 audit[3629]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0f3f8e00 a2=3 a3=0 items=0 ppid=1 pid=3629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.539000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.540124 sshd[3629]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:06.547330 systemd[1]: Started session-18.scope. Oct 2 20:09:06.547929 systemd-logind[1628]: New session 18 of user core. Oct 2 20:09:06.554000 audit[3629]: USER_START pid=3629 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.555000 audit[3631]: CRED_ACQ pid=3631 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.763584 sshd[3629]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:07.766000 audit[3629]: USER_END pid=3629 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.766000 audit[3629]: CRED_DISP pid=3629 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.770431 kubelet[2911]: E1002 20:09:07.770403 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:07.771048 systemd[1]: sshd@18-172.31.26.158:22-139.178.89.65:36202.service: Deactivated successfully. Oct 2 20:09:07.772143 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:09:07.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.26.158:22-139.178.89.65:36202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:07.773676 systemd-logind[1628]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:09:07.774904 systemd-logind[1628]: Removed session 18. Oct 2 20:09:07.789277 systemd[1]: Started sshd@19-172.31.26.158:22-139.178.89.65:36206.service. Oct 2 20:09:07.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.158:22-139.178.89.65:36206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:07.975000 audit[3639]: USER_ACCT pid=3639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.976252 sshd[3639]: Accepted publickey for core from 139.178.89.65 port 36206 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:07.977000 audit[3639]: CRED_ACQ pid=3639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.977000 audit[3639]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc38094630 a2=3 a3=0 items=0 ppid=1 pid=3639 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:07.977000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:07.978285 sshd[3639]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:07.985315 systemd[1]: Started session-19.scope. Oct 2 20:09:07.985316 systemd-logind[1628]: New session 19 of user core. Oct 2 20:09:07.993000 audit[3639]: USER_START pid=3639 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.995000 audit[3641]: CRED_ACQ pid=3641 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.274665 sshd[3639]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:08.276000 audit[3639]: USER_END pid=3639 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.276000 audit[3639]: CRED_DISP pid=3639 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.278487 systemd[1]: sshd@19-172.31.26.158:22-139.178.89.65:36206.service: Deactivated successfully. Oct 2 20:09:08.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.158:22-139.178.89.65:36206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:08.279783 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:09:08.284352 systemd-logind[1628]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:09:08.288008 systemd-logind[1628]: Removed session 19. Oct 2 20:09:12.771077 kubelet[2911]: E1002 20:09:12.771033 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:17.772394 kubelet[2911]: E1002 20:09:17.772361 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:18.301696 systemd[1]: Started sshd@20-172.31.26.158:22-139.178.89.65:42634.service. Oct 2 20:09:18.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.158:22-139.178.89.65:42634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:18.309748 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:09:18.309877 kernel: audit: type=1130 audit(1696277358.302:1179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.158:22-139.178.89.65:42634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:18.475000 audit[3650]: USER_ACCT pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.483894 sshd[3650]: Accepted publickey for core from 139.178.89.65 port 42634 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:18.483000 audit[3650]: CRED_ACQ pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.484296 sshd[3650]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:18.492751 kernel: audit: type=1101 audit(1696277358.475:1180): pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.492977 kernel: audit: type=1103 audit(1696277358.483:1181): pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.493016 kernel: audit: type=1006 audit(1696277358.483:1182): pid=3650 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:09:18.492338 systemd[1]: Started session-20.scope. Oct 2 20:09:18.494663 systemd-logind[1628]: New session 20 of user core. Oct 2 20:09:18.483000 audit[3650]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd72407d0 a2=3 a3=0 items=0 ppid=1 pid=3650 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:18.483000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:18.505087 kernel: audit: type=1300 audit(1696277358.483:1182): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd72407d0 a2=3 a3=0 items=0 ppid=1 pid=3650 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:18.505192 kernel: audit: type=1327 audit(1696277358.483:1182): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:18.505229 kernel: audit: type=1105 audit(1696277358.501:1183): pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.501000 audit[3650]: USER_START pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.512119 kernel: audit: type=1103 audit(1696277358.503:1184): pid=3652 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.503000 audit[3652]: CRED_ACQ pid=3652 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.716295 sshd[3650]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:18.718000 audit[3650]: USER_END pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.720761 systemd[1]: sshd@20-172.31.26.158:22-139.178.89.65:42634.service: Deactivated successfully. Oct 2 20:09:18.721764 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:09:18.718000 audit[3650]: CRED_DISP pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.727838 systemd-logind[1628]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:09:18.729592 systemd-logind[1628]: Removed session 20. Oct 2 20:09:18.733767 kernel: audit: type=1106 audit(1696277358.718:1185): pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.733851 kernel: audit: type=1104 audit(1696277358.718:1186): pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.158:22-139.178.89.65:42634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:19.636536 kubelet[2911]: E1002 20:09:19.636504 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:09:22.773127 kubelet[2911]: E1002 20:09:22.773098 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:27.774369 kubelet[2911]: E1002 20:09:27.774339 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:28.746084 systemd[1]: Started sshd@21-172.31.26.158:22-139.178.89.65:53552.service. Oct 2 20:09:28.757118 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:28.757263 kernel: audit: type=1130 audit(1696277368.747:1188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.26.158:22-139.178.89.65:53552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:28.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.26.158:22-139.178.89.65:53552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:28.926000 audit[3664]: USER_ACCT pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.926890 sshd[3664]: Accepted publickey for core from 139.178.89.65 port 53552 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:28.934962 kernel: audit: type=1101 audit(1696277368.926:1189): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.938000 audit[3664]: CRED_ACQ pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.939377 sshd[3664]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:28.953294 systemd[1]: Started session-21.scope. Oct 2 20:09:28.954461 kernel: audit: type=1103 audit(1696277368.938:1190): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.954547 kernel: audit: type=1006 audit(1696277368.938:1191): pid=3664 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 20:09:28.938000 audit[3664]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7032f470 a2=3 a3=0 items=0 ppid=1 pid=3664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:28.954637 systemd-logind[1628]: New session 21 of user core. Oct 2 20:09:28.963224 kernel: audit: type=1300 audit(1696277368.938:1191): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7032f470 a2=3 a3=0 items=0 ppid=1 pid=3664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:28.963470 kernel: audit: type=1327 audit(1696277368.938:1191): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:28.938000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:28.962000 audit[3664]: USER_START pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.973459 kernel: audit: type=1105 audit(1696277368.962:1192): pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.973568 kernel: audit: type=1103 audit(1696277368.964:1193): pid=3666 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.964000 audit[3666]: CRED_ACQ pid=3666 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.162676 sshd[3664]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:29.164000 audit[3664]: USER_END pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.164000 audit[3664]: CRED_DISP pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.172841 systemd[1]: sshd@21-172.31.26.158:22-139.178.89.65:53552.service: Deactivated successfully. Oct 2 20:09:29.173923 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:09:29.175720 systemd-logind[1628]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:09:29.176960 systemd-logind[1628]: Removed session 21. Oct 2 20:09:29.177471 kernel: audit: type=1106 audit(1696277369.164:1194): pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.177526 kernel: audit: type=1104 audit(1696277369.164:1195): pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.26.158:22-139.178.89.65:53552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:31.446000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:31.446000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001afa3f0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:31.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:31.451000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:31.451000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002581b20 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:31.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:32.634125 kubelet[2911]: E1002 20:09:32.634090 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:09:32.776028 kubelet[2911]: E1002 20:09:32.775986 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:33.469000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:33.469000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00e131140 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:09:33.469000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:33.470000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:33.470000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c008919300 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:09:33.470000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:33.471000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:33.471000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00e1311d0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:09:33.471000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:33.503000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:33.503000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00e6061e0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:09:33.503000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:33.672000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:33.672000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00e6062d0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:09:33.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:33.714000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:33.714000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c008c7a640 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:09:33.714000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:37.777632 kubelet[2911]: E1002 20:09:37.777547 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:39.215754 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:09:39.215920 kernel: audit: type=1130 audit(1696277379.195:1205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.158:22-139.178.89.65:42040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:39.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.158:22-139.178.89.65:42040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:39.196685 systemd[1]: Started sshd@22-172.31.26.158:22-139.178.89.65:42040.service. Oct 2 20:09:39.399000 audit[3678]: USER_ACCT pid=3678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.404469 sshd[3678]: Accepted publickey for core from 139.178.89.65 port 42040 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:39.411275 kernel: audit: type=1101 audit(1696277379.399:1206): pid=3678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.411898 sshd[3678]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:39.410000 audit[3678]: CRED_ACQ pid=3678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.426474 kernel: audit: type=1103 audit(1696277379.410:1207): pid=3678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.426601 kernel: audit: type=1006 audit(1696277379.410:1208): pid=3678 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:09:39.426636 kernel: audit: type=1300 audit(1696277379.410:1208): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef3e911e0 a2=3 a3=0 items=0 ppid=1 pid=3678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:39.410000 audit[3678]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef3e911e0 a2=3 a3=0 items=0 ppid=1 pid=3678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:39.425654 systemd[1]: Started session-22.scope. Oct 2 20:09:39.429404 systemd-logind[1628]: New session 22 of user core. Oct 2 20:09:39.410000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:39.437212 kernel: audit: type=1327 audit(1696277379.410:1208): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:39.441000 audit[3678]: USER_START pid=3678 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.447000 audit[3680]: CRED_ACQ pid=3680 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.457993 kernel: audit: type=1105 audit(1696277379.441:1209): pid=3678 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.458145 kernel: audit: type=1103 audit(1696277379.447:1210): pid=3680 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.670360 sshd[3678]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:39.672000 audit[3678]: USER_END pid=3678 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.676538 systemd[1]: sshd@22-172.31.26.158:22-139.178.89.65:42040.service: Deactivated successfully. Oct 2 20:09:39.682579 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:09:39.686154 systemd-logind[1628]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:09:39.687498 kernel: audit: type=1106 audit(1696277379.672:1211): pid=3678 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.672000 audit[3678]: CRED_DISP pid=3678 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.688017 systemd-logind[1628]: Removed session 22. Oct 2 20:09:39.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.158:22-139.178.89.65:42040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:39.695708 kernel: audit: type=1104 audit(1696277379.672:1212): pid=3678 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:42.778658 kubelet[2911]: E1002 20:09:42.778628 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:44.635437 kubelet[2911]: E1002 20:09:44.635393 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:09:47.784654 kubelet[2911]: E1002 20:09:47.784625 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:48.143000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.146344 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:48.146437 kernel: audit: type=1400 audit(1696277388.143:1214): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.143000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231a000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:48.159670 kernel: audit: type=1300 audit(1696277388.143:1214): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231a000 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:48.159800 kernel: audit: type=1327 audit(1696277388.143:1214): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:48.143000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:48.144000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.173658 kernel: audit: type=1400 audit(1696277388.144:1215): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.173766 kernel: audit: type=1300 audit(1696277388.144:1215): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231a020 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:48.144000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231a020 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:48.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:48.187393 kernel: audit: type=1327 audit(1696277388.144:1215): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:48.187495 kernel: audit: type=1400 audit(1696277388.145:1216): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.145000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.145000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231a140 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:48.208049 kernel: audit: type=1300 audit(1696277388.145:1216): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231a140 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:48.208168 kernel: audit: type=1327 audit(1696277388.145:1216): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:48.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:48.148000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.220119 kernel: audit: type=1400 audit(1696277388.148:1217): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:48.148000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023c81c0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:09:48.148000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:49.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.26.158:22-139.178.89.65:34492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.695503 systemd[1]: Started sshd@23-172.31.26.158:22-139.178.89.65:34492.service. Oct 2 20:09:49.854000 audit[3689]: USER_ACCT pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.855798 sshd[3689]: Accepted publickey for core from 139.178.89.65 port 34492 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:49.855000 audit[3689]: CRED_ACQ pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.855000 audit[3689]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd9aeb320 a2=3 a3=0 items=0 ppid=1 pid=3689 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.855000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:49.857384 sshd[3689]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:49.863279 systemd[1]: Started session-23.scope. Oct 2 20:09:49.863803 systemd-logind[1628]: New session 23 of user core. Oct 2 20:09:49.880000 audit[3689]: USER_START pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.884000 audit[3691]: CRED_ACQ pid=3691 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.072604 sshd[3689]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:50.073000 audit[3689]: USER_END pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.074000 audit[3689]: CRED_DISP pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.078301 systemd[1]: sshd@23-172.31.26.158:22-139.178.89.65:34492.service: Deactivated successfully. Oct 2 20:09:50.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.26.158:22-139.178.89.65:34492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:50.080109 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:09:50.081695 systemd-logind[1628]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:09:50.083858 systemd-logind[1628]: Removed session 23. Oct 2 20:09:52.785779 kubelet[2911]: E1002 20:09:52.785732 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:55.633992 kubelet[2911]: E1002 20:09:55.633958 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:09:57.788175 kubelet[2911]: E1002 20:09:57.788003 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:00.101444 systemd[1]: Started sshd@24-172.31.26.158:22-139.178.89.65:43970.service. Oct 2 20:10:00.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.26.158:22-139.178.89.65:43970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:00.109309 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:10:00.109445 kernel: audit: type=1130 audit(1696277400.100:1227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.26.158:22-139.178.89.65:43970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:00.274000 audit[3703]: USER_ACCT pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.276435 sshd[3703]: Accepted publickey for core from 139.178.89.65 port 43970 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:00.290142 kernel: audit: type=1101 audit(1696277400.274:1228): pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.290352 kernel: audit: type=1103 audit(1696277400.283:1229): pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.283000 audit[3703]: CRED_ACQ pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.285469 sshd[3703]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:00.295441 kernel: audit: type=1006 audit(1696277400.283:1230): pid=3703 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:10:00.283000 audit[3703]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7b4cfb50 a2=3 a3=0 items=0 ppid=1 pid=3703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:00.302264 kernel: audit: type=1300 audit(1696277400.283:1230): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7b4cfb50 a2=3 a3=0 items=0 ppid=1 pid=3703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:00.283000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:00.306273 kernel: audit: type=1327 audit(1696277400.283:1230): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:00.309321 systemd-logind[1628]: New session 24 of user core. Oct 2 20:10:00.309658 systemd[1]: Started session-24.scope. Oct 2 20:10:00.317000 audit[3703]: USER_START pid=3703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.322000 audit[3705]: CRED_ACQ pid=3705 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.338225 kernel: audit: type=1105 audit(1696277400.317:1231): pid=3703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.338413 kernel: audit: type=1103 audit(1696277400.322:1232): pid=3705 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.513515 sshd[3703]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:00.513000 audit[3703]: USER_END pid=3703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.522278 kernel: audit: type=1106 audit(1696277400.513:1233): pid=3703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.520000 audit[3703]: CRED_DISP pid=3703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.524863 systemd[1]: sshd@24-172.31.26.158:22-139.178.89.65:43970.service: Deactivated successfully. Oct 2 20:10:00.525956 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:10:00.528768 systemd-logind[1628]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:10:00.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.26.158:22-139.178.89.65:43970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:00.530630 systemd-logind[1628]: Removed session 24. Oct 2 20:10:00.531280 kernel: audit: type=1104 audit(1696277400.520:1234): pid=3703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:02.789667 kubelet[2911]: E1002 20:10:02.789638 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:07.637539 env[1635]: time="2023-10-02T20:10:07.637486064Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:10:07.660099 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3465928712.mount: Deactivated successfully. Oct 2 20:10:07.669467 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1174100587.mount: Deactivated successfully. Oct 2 20:10:07.678522 env[1635]: time="2023-10-02T20:10:07.678464708Z" level=info msg="CreateContainer within sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\"" Oct 2 20:10:07.679267 env[1635]: time="2023-10-02T20:10:07.679205753Z" level=info msg="StartContainer for \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\"" Oct 2 20:10:07.708824 systemd[1]: Started cri-containerd-69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4.scope. Oct 2 20:10:07.733520 systemd[1]: cri-containerd-69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4.scope: Deactivated successfully. Oct 2 20:10:07.761627 env[1635]: time="2023-10-02T20:10:07.761555249Z" level=info msg="shim disconnected" id=69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4 Oct 2 20:10:07.761887 env[1635]: time="2023-10-02T20:10:07.761856966Z" level=warning msg="cleaning up after shim disconnected" id=69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4 namespace=k8s.io Oct 2 20:10:07.761887 env[1635]: time="2023-10-02T20:10:07.761882074Z" level=info msg="cleaning up dead shim" Oct 2 20:10:07.773101 env[1635]: time="2023-10-02T20:10:07.773025323Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3738 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:07Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:07.773547 env[1635]: time="2023-10-02T20:10:07.773485630Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 20:10:07.776462 env[1635]: time="2023-10-02T20:10:07.776312908Z" level=error msg="Failed to pipe stdout of container \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\"" error="reading from a closed fifo" Oct 2 20:10:07.776700 env[1635]: time="2023-10-02T20:10:07.776657636Z" level=error msg="Failed to pipe stderr of container \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\"" error="reading from a closed fifo" Oct 2 20:10:07.780193 env[1635]: time="2023-10-02T20:10:07.780129133Z" level=error msg="StartContainer for \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:07.780548 kubelet[2911]: E1002 20:10:07.780523 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4" Oct 2 20:10:07.781469 kubelet[2911]: E1002 20:10:07.780687 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:07.781469 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:07.781469 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:10:07.781469 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s9fz4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:07.781469 kubelet[2911]: E1002 20:10:07.781181 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:10:07.791743 kubelet[2911]: E1002 20:10:07.791676 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:08.303741 kubelet[2911]: I1002 20:10:08.303714 2911 scope.go:115] "RemoveContainer" containerID="0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a" Oct 2 20:10:08.304226 kubelet[2911]: I1002 20:10:08.304206 2911 scope.go:115] "RemoveContainer" containerID="0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a" Oct 2 20:10:08.305849 env[1635]: time="2023-10-02T20:10:08.305810985Z" level=info msg="RemoveContainer for \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\"" Oct 2 20:10:08.307185 env[1635]: time="2023-10-02T20:10:08.306519696Z" level=info msg="RemoveContainer for \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\"" Oct 2 20:10:08.307185 env[1635]: time="2023-10-02T20:10:08.306611564Z" level=error msg="RemoveContainer for \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\" failed" error="failed to set removing state for container \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\": container is already in removing state" Oct 2 20:10:08.307377 kubelet[2911]: E1002 20:10:08.306770 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\": container is already in removing state" containerID="0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a" Oct 2 20:10:08.307377 kubelet[2911]: E1002 20:10:08.306807 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a": container is already in removing state; Skipping pod "cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)" Oct 2 20:10:08.307623 kubelet[2911]: E1002 20:10:08.307608 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:10:08.312267 env[1635]: time="2023-10-02T20:10:08.311676207Z" level=info msg="RemoveContainer for \"0cbdb9d147852a32c8a6b89844cf6bc18ace02e8fea28b265dbc64927f6ff54a\" returns successfully" Oct 2 20:10:08.654402 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4-rootfs.mount: Deactivated successfully. Oct 2 20:10:10.555331 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:10.557534 kernel: audit: type=1130 audit(1696277410.543:1236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.26.158:22-139.178.89.65:45500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:10.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.26.158:22-139.178.89.65:45500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:10.544666 systemd[1]: Started sshd@25-172.31.26.158:22-139.178.89.65:45500.service. Oct 2 20:10:10.747000 audit[3752]: USER_ACCT pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.758494 kernel: audit: type=1101 audit(1696277410.747:1237): pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.758550 sshd[3752]: Accepted publickey for core from 139.178.89.65 port 45500 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:10.757000 audit[3752]: CRED_ACQ pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.759448 sshd[3752]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:10.784916 kernel: audit: type=1103 audit(1696277410.757:1238): pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.785160 kernel: audit: type=1006 audit(1696277410.757:1239): pid=3752 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:10:10.784017 systemd[1]: Started session-25.scope. Oct 2 20:10:10.757000 audit[3752]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdecea4a10 a2=3 a3=0 items=0 ppid=1 pid=3752 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:10.786548 systemd-logind[1628]: New session 25 of user core. Oct 2 20:10:10.800294 kernel: audit: type=1300 audit(1696277410.757:1239): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdecea4a10 a2=3 a3=0 items=0 ppid=1 pid=3752 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:10.757000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:10.808653 kernel: audit: type=1327 audit(1696277410.757:1239): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:10.806000 audit[3752]: USER_START pid=3752 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.824452 kernel: audit: type=1105 audit(1696277410.806:1240): pid=3752 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.811000 audit[3754]: CRED_ACQ pid=3754 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.844323 kernel: audit: type=1103 audit(1696277410.811:1241): pid=3754 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.867277 kubelet[2911]: W1002 20:10:10.867044 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice/cri-containerd-69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4.scope WatchSource:0}: task 69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4 not found: not found Oct 2 20:10:11.040699 sshd[3752]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:11.041000 audit[3752]: USER_END pid=3752 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.047734 systemd[1]: sshd@25-172.31.26.158:22-139.178.89.65:45500.service: Deactivated successfully. Oct 2 20:10:11.052264 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:10:11.055470 systemd-logind[1628]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:10:11.041000 audit[3752]: CRED_DISP pid=3752 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.057977 systemd-logind[1628]: Removed session 25. Oct 2 20:10:11.064313 kernel: audit: type=1106 audit(1696277411.041:1242): pid=3752 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.064458 kernel: audit: type=1104 audit(1696277411.041:1243): pid=3752 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.26.158:22-139.178.89.65:45500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:12.792537 kubelet[2911]: E1002 20:10:12.792457 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:17.793604 kubelet[2911]: E1002 20:10:17.793571 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:20.634099 kubelet[2911]: E1002 20:10:20.634060 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:10:21.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.26.158:22-139.178.89.65:39764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.068286 systemd[1]: Started sshd@26-172.31.26.158:22-139.178.89.65:39764.service. Oct 2 20:10:21.070063 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:21.070126 kernel: audit: type=1130 audit(1696277421.067:1245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.26.158:22-139.178.89.65:39764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.255274 kernel: audit: type=1101 audit(1696277421.246:1246): pid=3764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.246000 audit[3764]: USER_ACCT pid=3764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.255590 sshd[3764]: Accepted publickey for core from 139.178.89.65 port 39764 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:21.254000 audit[3764]: CRED_ACQ pid=3764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.259706 sshd[3764]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:21.268235 kernel: audit: type=1103 audit(1696277421.254:1247): pid=3764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.268375 kernel: audit: type=1006 audit(1696277421.254:1248): pid=3764 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:10:21.254000 audit[3764]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca0ce21e0 a2=3 a3=0 items=0 ppid=1 pid=3764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:21.271061 systemd[1]: Started session-26.scope. Oct 2 20:10:21.274836 systemd-logind[1628]: New session 26 of user core. Oct 2 20:10:21.278911 kernel: audit: type=1300 audit(1696277421.254:1248): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca0ce21e0 a2=3 a3=0 items=0 ppid=1 pid=3764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:21.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:21.287399 kernel: audit: type=1327 audit(1696277421.254:1248): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:21.289000 audit[3764]: USER_START pid=3764 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.289000 audit[3766]: CRED_ACQ pid=3766 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.306455 kernel: audit: type=1105 audit(1696277421.289:1249): pid=3764 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.306607 kernel: audit: type=1103 audit(1696277421.289:1250): pid=3766 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.483183 sshd[3764]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:21.484000 audit[3764]: USER_END pid=3764 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.487475 systemd[1]: sshd@26-172.31.26.158:22-139.178.89.65:39764.service: Deactivated successfully. Oct 2 20:10:21.488499 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:10:21.490935 systemd-logind[1628]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:10:21.492266 systemd-logind[1628]: Removed session 26. Oct 2 20:10:21.496265 kernel: audit: type=1106 audit(1696277421.484:1251): pid=3764 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.496364 kernel: audit: type=1104 audit(1696277421.484:1252): pid=3764 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.484000 audit[3764]: CRED_DISP pid=3764 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.26.158:22-139.178.89.65:39764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.795265 kubelet[2911]: E1002 20:10:22.795227 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:27.796603 kubelet[2911]: E1002 20:10:27.796563 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:31.447000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:31.450091 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:31.450155 kernel: audit: type=1400 audit(1696277431.447:1254): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:31.447000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010005d0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:31.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:31.476842 kernel: audit: type=1300 audit(1696277431.447:1254): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010005d0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:31.476986 kernel: audit: type=1327 audit(1696277431.447:1254): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:31.477017 kernel: audit: type=1400 audit(1696277431.452:1255): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:31.452000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:31.452000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00043b580 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:31.490886 kernel: audit: type=1300 audit(1696277431.452:1255): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00043b580 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:31.491029 kernel: audit: type=1327 audit(1696277431.452:1255): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:31.452000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:31.519289 systemd[1]: Started sshd@27-172.31.26.158:22-139.178.89.65:52752.service. Oct 2 20:10:31.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.26.158:22-139.178.89.65:52752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:31.529409 kernel: audit: type=1130 audit(1696277431.518:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.26.158:22-139.178.89.65:52752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:31.688000 audit[3778]: USER_ACCT pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.690078 sshd[3778]: Accepted publickey for core from 139.178.89.65 port 52752 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:31.697281 kernel: audit: type=1101 audit(1696277431.688:1257): pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.696000 audit[3778]: CRED_ACQ pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.698328 sshd[3778]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:31.704336 kernel: audit: type=1103 audit(1696277431.696:1258): pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.696000 audit[3778]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe85f9ef70 a2=3 a3=0 items=0 ppid=1 pid=3778 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:31.708270 kernel: audit: type=1006 audit(1696277431.696:1259): pid=3778 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:10:31.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:31.711979 systemd[1]: Started session-27.scope. Oct 2 20:10:31.713344 systemd-logind[1628]: New session 27 of user core. Oct 2 20:10:31.717000 audit[3778]: USER_START pid=3778 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.719000 audit[3780]: CRED_ACQ pid=3780 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.902526 sshd[3778]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:31.902000 audit[3778]: USER_END pid=3778 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.903000 audit[3778]: CRED_DISP pid=3778 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.905890 systemd[1]: sshd@27-172.31.26.158:22-139.178.89.65:52752.service: Deactivated successfully. Oct 2 20:10:31.906946 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:10:31.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.26.158:22-139.178.89.65:52752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:31.908135 systemd-logind[1628]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:10:31.909040 systemd-logind[1628]: Removed session 27. Oct 2 20:10:32.797880 kubelet[2911]: E1002 20:10:32.797836 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:33.471000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:33.471000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:33.471000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0127fabd0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:10:33.471000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:33.471000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00ee77300 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:10:33.471000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:33.471000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:33.471000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0127bb8c0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:10:33.471000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:33.505000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:33.505000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0127bb9e0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:10:33.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:33.636263 kubelet[2911]: E1002 20:10:33.633680 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-9pclg_kube-system(e5d4915b-86e7-4935-aa2e-d2a6778763fa)\"" pod="kube-system/cilium-9pclg" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa Oct 2 20:10:33.673000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:33.673000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0127bba10 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:10:33.673000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:33.715000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:33.715000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00ee779e0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:10:33.715000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:37.798997 kubelet[2911]: E1002 20:10:37.798964 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:41.933859 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:10:41.934110 kernel: audit: type=1130 audit(1696277441.929:1271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.26.158:22-139.178.89.65:39446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:41.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.26.158:22-139.178.89.65:39446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:41.930498 systemd[1]: Started sshd@28-172.31.26.158:22-139.178.89.65:39446.service. Oct 2 20:10:42.103000 audit[3793]: USER_ACCT pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.114751 kernel: audit: type=1101 audit(1696277442.103:1272): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.114891 sshd[3793]: Accepted publickey for core from 139.178.89.65 port 39446 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:42.114000 audit[3793]: CRED_ACQ pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.130300 kernel: audit: type=1103 audit(1696277442.114:1273): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.130505 sshd[3793]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:42.144823 kernel: audit: type=1006 audit(1696277442.114:1274): pid=3793 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:10:42.145054 kernel: audit: type=1300 audit(1696277442.114:1274): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd702a5f20 a2=3 a3=0 items=0 ppid=1 pid=3793 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:42.114000 audit[3793]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd702a5f20 a2=3 a3=0 items=0 ppid=1 pid=3793 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:42.114000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:42.154002 systemd[1]: Started session-28.scope. Oct 2 20:10:42.156964 kernel: audit: type=1327 audit(1696277442.114:1274): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:42.156419 systemd-logind[1628]: New session 28 of user core. Oct 2 20:10:42.163000 audit[3793]: USER_START pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.176415 kernel: audit: type=1105 audit(1696277442.163:1275): pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.165000 audit[3795]: CRED_ACQ pid=3795 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.182302 kernel: audit: type=1103 audit(1696277442.165:1276): pid=3795 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.379486 sshd[3793]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:42.384000 audit[3793]: USER_END pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.390095 systemd-logind[1628]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:10:42.394967 systemd[1]: sshd@28-172.31.26.158:22-139.178.89.65:39446.service: Deactivated successfully. Oct 2 20:10:42.396597 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:10:42.400344 kernel: audit: type=1106 audit(1696277442.384:1277): pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.408678 kernel: audit: type=1104 audit(1696277442.385:1278): pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.385000 audit[3793]: CRED_DISP pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.408614 systemd[1]: Started sshd@29-172.31.26.158:22-139.178.89.65:39462.service. Oct 2 20:10:42.410487 systemd-logind[1628]: Removed session 28. Oct 2 20:10:42.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.26.158:22-139.178.89.65:39446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:42.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.26.158:22-139.178.89.65:39462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:42.576000 audit[3808]: USER_ACCT pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.578284 sshd[3808]: Accepted publickey for core from 139.178.89.65 port 39462 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:42.578000 audit[3808]: CRED_ACQ pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.578000 audit[3808]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1943d600 a2=3 a3=0 items=0 ppid=1 pid=3808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:42.578000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:42.579873 sshd[3808]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:42.588068 systemd[1]: Started session-29.scope. Oct 2 20:10:42.588825 systemd-logind[1628]: New session 29 of user core. Oct 2 20:10:42.595000 audit[3808]: USER_START pid=3808 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.598000 audit[3810]: CRED_ACQ pid=3810 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.800160 kubelet[2911]: E1002 20:10:42.800042 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:44.536428 env[1635]: time="2023-10-02T20:10:44.536365160Z" level=info msg="StopPodSandbox for \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\"" Oct 2 20:10:44.536984 env[1635]: time="2023-10-02T20:10:44.536468662Z" level=info msg="Container to stop \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:44.543513 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2-shm.mount: Deactivated successfully. Oct 2 20:10:44.557000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:10:44.558738 systemd[1]: cri-containerd-b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2.scope: Deactivated successfully. Oct 2 20:10:44.561000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:10:44.582583 env[1635]: time="2023-10-02T20:10:44.582539581Z" level=info msg="StopContainer for \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\" with timeout 30 (s)" Oct 2 20:10:44.583389 env[1635]: time="2023-10-02T20:10:44.583354955Z" level=info msg="Stop container \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\" with signal terminated" Oct 2 20:10:44.618098 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2-rootfs.mount: Deactivated successfully. Oct 2 20:10:44.619000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:10:44.620107 systemd[1]: cri-containerd-b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81.scope: Deactivated successfully. Oct 2 20:10:44.622000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:10:44.656203 env[1635]: time="2023-10-02T20:10:44.656115134Z" level=info msg="shim disconnected" id=b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2 Oct 2 20:10:44.656578 env[1635]: time="2023-10-02T20:10:44.656543808Z" level=warning msg="cleaning up after shim disconnected" id=b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2 namespace=k8s.io Oct 2 20:10:44.656698 env[1635]: time="2023-10-02T20:10:44.656681517Z" level=info msg="cleaning up dead shim" Oct 2 20:10:44.669142 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81-rootfs.mount: Deactivated successfully. Oct 2 20:10:44.680834 env[1635]: time="2023-10-02T20:10:44.680780717Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3851 runtime=io.containerd.runc.v2\n" Oct 2 20:10:44.681333 env[1635]: time="2023-10-02T20:10:44.681166143Z" level=info msg="TearDown network for sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" successfully" Oct 2 20:10:44.681333 env[1635]: time="2023-10-02T20:10:44.681201237Z" level=info msg="StopPodSandbox for \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" returns successfully" Oct 2 20:10:44.686090 env[1635]: time="2023-10-02T20:10:44.686048958Z" level=info msg="shim disconnected" id=b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81 Oct 2 20:10:44.697995 env[1635]: time="2023-10-02T20:10:44.694454028Z" level=warning msg="cleaning up after shim disconnected" id=b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81 namespace=k8s.io Oct 2 20:10:44.697995 env[1635]: time="2023-10-02T20:10:44.694485861Z" level=info msg="cleaning up dead shim" Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713383 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e5d4915b-86e7-4935-aa2e-d2a6778763fa-clustermesh-secrets\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713450 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-xtables-lock\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713572 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cni-path\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713615 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-s9fz4\" (UniqueName: \"kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-kube-api-access-s9fz4\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713660 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hostproc\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713692 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hubble-tls\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713741 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-config-path\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713770 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-cgroup\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713813 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-etc-cni-netd\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713836 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-lib-modules\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713877 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-kernel\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713906 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-run\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713949 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-bpf-maps\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.713978 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-net\") pod \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\" (UID: \"e5d4915b-86e7-4935-aa2e-d2a6778763fa\") " Oct 2 20:10:44.715280 kubelet[2911]: I1002 20:10:44.714062 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.715280 kubelet[2911]: W1002 20:10:44.714691 2911 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/e5d4915b-86e7-4935-aa2e-d2a6778763fa/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:44.716608 kubelet[2911]: I1002 20:10:44.716571 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.716685 kubelet[2911]: I1002 20:10:44.716615 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cni-path" (OuterVolumeSpecName: "cni-path") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.716877 kubelet[2911]: I1002 20:10:44.716855 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hostproc" (OuterVolumeSpecName: "hostproc") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.717601 kubelet[2911]: I1002 20:10:44.717076 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.717601 kubelet[2911]: I1002 20:10:44.717108 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.717601 kubelet[2911]: I1002 20:10:44.717131 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.717601 kubelet[2911]: I1002 20:10:44.717153 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.717601 kubelet[2911]: I1002 20:10:44.717175 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.717601 kubelet[2911]: I1002 20:10:44.717201 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.720663 kubelet[2911]: I1002 20:10:44.720481 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:44.721920 env[1635]: time="2023-10-02T20:10:44.721879180Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3864 runtime=io.containerd.runc.v2\n" Oct 2 20:10:44.735579 env[1635]: time="2023-10-02T20:10:44.726367998Z" level=info msg="StopContainer for \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\" returns successfully" Oct 2 20:10:44.735579 env[1635]: time="2023-10-02T20:10:44.726996928Z" level=info msg="StopPodSandbox for \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\"" Oct 2 20:10:44.735579 env[1635]: time="2023-10-02T20:10:44.727075416Z" level=info msg="Container to stop \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:44.735805 kubelet[2911]: I1002 20:10:44.732980 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e5d4915b-86e7-4935-aa2e-d2a6778763fa-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:10:44.735805 kubelet[2911]: I1002 20:10:44.734767 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:44.729326 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7-shm.mount: Deactivated successfully. Oct 2 20:10:44.729486 systemd[1]: var-lib-kubelet-pods-e5d4915b\x2d86e7\x2d4935\x2daa2e\x2dd2a6778763fa-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ds9fz4.mount: Deactivated successfully. Oct 2 20:10:44.734972 systemd[1]: var-lib-kubelet-pods-e5d4915b\x2d86e7\x2d4935\x2daa2e\x2dd2a6778763fa-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:10:44.737199 kubelet[2911]: I1002 20:10:44.737166 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-kube-api-access-s9fz4" (OuterVolumeSpecName: "kube-api-access-s9fz4") pod "e5d4915b-86e7-4935-aa2e-d2a6778763fa" (UID: "e5d4915b-86e7-4935-aa2e-d2a6778763fa"). InnerVolumeSpecName "kube-api-access-s9fz4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:44.749000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:10:44.750325 systemd[1]: cri-containerd-56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7.scope: Deactivated successfully. Oct 2 20:10:44.753000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:10:44.802385 env[1635]: time="2023-10-02T20:10:44.800366465Z" level=info msg="shim disconnected" id=56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7 Oct 2 20:10:44.802385 env[1635]: time="2023-10-02T20:10:44.800425415Z" level=warning msg="cleaning up after shim disconnected" id=56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7 namespace=k8s.io Oct 2 20:10:44.802385 env[1635]: time="2023-10-02T20:10:44.800437546Z" level=info msg="cleaning up dead shim" Oct 2 20:10:44.814334 env[1635]: time="2023-10-02T20:10:44.814285258Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3898 runtime=io.containerd.runc.v2\n" Oct 2 20:10:44.814504 kubelet[2911]: I1002 20:10:44.814479 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-run\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814603 kubelet[2911]: I1002 20:10:44.814511 2911 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-bpf-maps\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814603 kubelet[2911]: I1002 20:10:44.814526 2911 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-net\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814603 kubelet[2911]: I1002 20:10:44.814546 2911 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e5d4915b-86e7-4935-aa2e-d2a6778763fa-clustermesh-secrets\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814603 kubelet[2911]: I1002 20:10:44.814561 2911 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-xtables-lock\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814603 kubelet[2911]: I1002 20:10:44.814576 2911 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cni-path\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814681 2911 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-s9fz4\" (UniqueName: \"kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-kube-api-access-s9fz4\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814700 2911 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hostproc\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814717 2911 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e5d4915b-86e7-4935-aa2e-d2a6778763fa-hubble-tls\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814743 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-config-path\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814759 2911 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-etc-cni-netd\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814776 2911 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-lib-modules\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814791 2911 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-host-proc-sys-kernel\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.814834 kubelet[2911]: I1002 20:10:44.814806 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e5d4915b-86e7-4935-aa2e-d2a6778763fa-cilium-cgroup\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:44.815420 env[1635]: time="2023-10-02T20:10:44.815379376Z" level=info msg="TearDown network for sandbox \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" successfully" Oct 2 20:10:44.815523 env[1635]: time="2023-10-02T20:10:44.815416238Z" level=info msg="StopPodSandbox for \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" returns successfully" Oct 2 20:10:45.016769 kubelet[2911]: I1002 20:10:45.016293 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4b9e91e6-715d-47ea-a47f-0c0265de215f-cilium-config-path\") pod \"4b9e91e6-715d-47ea-a47f-0c0265de215f\" (UID: \"4b9e91e6-715d-47ea-a47f-0c0265de215f\") " Oct 2 20:10:45.016769 kubelet[2911]: I1002 20:10:45.016361 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-b7dkt\" (UniqueName: \"kubernetes.io/projected/4b9e91e6-715d-47ea-a47f-0c0265de215f-kube-api-access-b7dkt\") pod \"4b9e91e6-715d-47ea-a47f-0c0265de215f\" (UID: \"4b9e91e6-715d-47ea-a47f-0c0265de215f\") " Oct 2 20:10:45.017102 kubelet[2911]: W1002 20:10:45.017039 2911 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/4b9e91e6-715d-47ea-a47f-0c0265de215f/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:45.028675 kubelet[2911]: I1002 20:10:45.028623 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4b9e91e6-715d-47ea-a47f-0c0265de215f-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4b9e91e6-715d-47ea-a47f-0c0265de215f" (UID: "4b9e91e6-715d-47ea-a47f-0c0265de215f"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:45.036869 kubelet[2911]: I1002 20:10:45.034709 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4b9e91e6-715d-47ea-a47f-0c0265de215f-kube-api-access-b7dkt" (OuterVolumeSpecName: "kube-api-access-b7dkt") pod "4b9e91e6-715d-47ea-a47f-0c0265de215f" (UID: "4b9e91e6-715d-47ea-a47f-0c0265de215f"). InnerVolumeSpecName "kube-api-access-b7dkt". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:45.117665 kubelet[2911]: I1002 20:10:45.117537 2911 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-b7dkt\" (UniqueName: \"kubernetes.io/projected/4b9e91e6-715d-47ea-a47f-0c0265de215f-kube-api-access-b7dkt\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:45.117665 kubelet[2911]: I1002 20:10:45.117578 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4b9e91e6-715d-47ea-a47f-0c0265de215f-cilium-config-path\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:10:45.424848 kubelet[2911]: I1002 20:10:45.424731 2911 scope.go:115] "RemoveContainer" containerID="b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81" Oct 2 20:10:45.426580 env[1635]: time="2023-10-02T20:10:45.426542078Z" level=info msg="RemoveContainer for \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\"" Oct 2 20:10:45.433205 systemd[1]: Removed slice kubepods-besteffort-pod4b9e91e6_715d_47ea_a47f_0c0265de215f.slice. Oct 2 20:10:45.435373 env[1635]: time="2023-10-02T20:10:45.433224380Z" level=info msg="RemoveContainer for \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\" returns successfully" Oct 2 20:10:45.435963 kubelet[2911]: I1002 20:10:45.435942 2911 scope.go:115] "RemoveContainer" containerID="b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81" Oct 2 20:10:45.438831 env[1635]: time="2023-10-02T20:10:45.437332072Z" level=error msg="ContainerStatus for \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\": not found" Oct 2 20:10:45.437900 systemd[1]: Removed slice kubepods-burstable-pode5d4915b_86e7_4935_aa2e_d2a6778763fa.slice. Oct 2 20:10:45.439274 kubelet[2911]: E1002 20:10:45.439256 2911 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\": not found" containerID="b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81" Oct 2 20:10:45.439389 kubelet[2911]: I1002 20:10:45.439380 2911 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81} err="failed to get container status \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\": rpc error: code = NotFound desc = an error occurred when try to find container \"b7cf1361e8b93b2541285bc2db42162ac72358c1d42ef35ccf4bb8aa7d2ebf81\": not found" Oct 2 20:10:45.439455 kubelet[2911]: I1002 20:10:45.439449 2911 scope.go:115] "RemoveContainer" containerID="69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4" Oct 2 20:10:45.465083 env[1635]: time="2023-10-02T20:10:45.464310529Z" level=info msg="RemoveContainer for \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\"" Oct 2 20:10:45.469810 env[1635]: time="2023-10-02T20:10:45.469766720Z" level=info msg="RemoveContainer for \"69a6d9ac0b0dc05b411b4ee3dfbe421f87ae171bd0cac042660c95c70417dcc4\" returns successfully" Oct 2 20:10:45.544230 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7-rootfs.mount: Deactivated successfully. Oct 2 20:10:45.544385 systemd[1]: var-lib-kubelet-pods-4b9e91e6\x2d715d\x2d47ea\x2da47f\x2d0c0265de215f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2db7dkt.mount: Deactivated successfully. Oct 2 20:10:45.544481 systemd[1]: var-lib-kubelet-pods-e5d4915b\x2d86e7\x2d4935\x2daa2e\x2dd2a6778763fa-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:10:45.635863 kubelet[2911]: I1002 20:10:45.635831 2911 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=4b9e91e6-715d-47ea-a47f-0c0265de215f path="/var/lib/kubelet/pods/4b9e91e6-715d-47ea-a47f-0c0265de215f/volumes" Oct 2 20:10:45.636637 kubelet[2911]: I1002 20:10:45.636604 2911 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=e5d4915b-86e7-4935-aa2e-d2a6778763fa path="/var/lib/kubelet/pods/e5d4915b-86e7-4935-aa2e-d2a6778763fa/volumes" Oct 2 20:10:46.519771 sshd[3808]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:46.519000 audit[3808]: USER_END pid=3808 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:46.520000 audit[3808]: CRED_DISP pid=3808 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:46.523607 systemd-logind[1628]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:10:46.523855 systemd[1]: sshd@29-172.31.26.158:22-139.178.89.65:39462.service: Deactivated successfully. Oct 2 20:10:46.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.26.158:22-139.178.89.65:39462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:46.525040 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:10:46.525527 systemd[1]: session-29.scope: Consumed 1.055s CPU time. Oct 2 20:10:46.526524 systemd-logind[1628]: Removed session 29. Oct 2 20:10:46.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.26.158:22-139.178.89.65:33206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:46.548537 systemd[1]: Started sshd@30-172.31.26.158:22-139.178.89.65:33206.service. Oct 2 20:10:46.727000 audit[3913]: USER_ACCT pid=3913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:46.728666 sshd[3913]: Accepted publickey for core from 139.178.89.65 port 33206 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:46.728000 audit[3913]: CRED_ACQ pid=3913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:46.728000 audit[3913]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc451c72d0 a2=3 a3=0 items=0 ppid=1 pid=3913 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:46.728000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:46.731145 sshd[3913]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:46.744626 systemd-logind[1628]: New session 30 of user core. Oct 2 20:10:46.748094 systemd[1]: Started session-30.scope. Oct 2 20:10:46.753000 audit[3913]: USER_START pid=3913 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:46.755000 audit[3915]: CRED_ACQ pid=3915 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:46.849740 amazon-ssm-agent[1616]: 2023-10-02 20:10:46 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 20:10:46.950558 amazon-ssm-agent[1616]: 2023-10-02 20:10:46 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-084e47dd3de3f470d is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-084e47dd3de3f470d because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:10:46.950558 amazon-ssm-agent[1616]: status code: 400, request id: 171b4f42-5f09-44ae-a540-b6c6522ed2f8 Oct 2 20:10:47.453008 kubelet[2911]: I1002 20:10:47.452951 2911 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:10:47.453938 kubelet[2911]: E1002 20:10:47.453900 2911 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454108 kubelet[2911]: E1002 20:10:47.454094 2911 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4b9e91e6-715d-47ea-a47f-0c0265de215f" containerName="cilium-operator" Oct 2 20:10:47.454222 kubelet[2911]: E1002 20:10:47.454211 2911 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454351 kubelet[2911]: E1002 20:10:47.454340 2911 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454454 kubelet[2911]: E1002 20:10:47.454444 2911 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454550 kubelet[2911]: E1002 20:10:47.454540 2911 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454709 kubelet[2911]: I1002 20:10:47.454683 2911 memory_manager.go:346] "RemoveStaleState removing state" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454812 kubelet[2911]: I1002 20:10:47.454803 2911 memory_manager.go:346] "RemoveStaleState removing state" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454905 kubelet[2911]: I1002 20:10:47.454895 2911 memory_manager.go:346] "RemoveStaleState removing state" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.454992 kubelet[2911]: I1002 20:10:47.454985 2911 memory_manager.go:346] "RemoveStaleState removing state" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.455078 kubelet[2911]: I1002 20:10:47.455071 2911 memory_manager.go:346] "RemoveStaleState removing state" podUID="4b9e91e6-715d-47ea-a47f-0c0265de215f" containerName="cilium-operator" Oct 2 20:10:47.455181 kubelet[2911]: E1002 20:10:47.455174 2911 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.455290 kubelet[2911]: I1002 20:10:47.455281 2911 memory_manager.go:346] "RemoveStaleState removing state" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.455370 kubelet[2911]: I1002 20:10:47.455363 2911 memory_manager.go:346] "RemoveStaleState removing state" podUID="e5d4915b-86e7-4935-aa2e-d2a6778763fa" containerName="mount-cgroup" Oct 2 20:10:47.465603 systemd[1]: Created slice kubepods-burstable-pod3f2bd058_cd1a_4771_a527_dbca720ddfc3.slice. Oct 2 20:10:47.469582 kubelet[2911]: W1002 20:10:47.469549 2911 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.469796 kubelet[2911]: E1002 20:10:47.469783 2911 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.481647 kubelet[2911]: W1002 20:10:47.481615 2911 reflector.go:533] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.481950 kubelet[2911]: E1002 20:10:47.481931 2911 reflector.go:148] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.482222 kubelet[2911]: W1002 20:10:47.482205 2911 reflector.go:533] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.482348 kubelet[2911]: E1002 20:10:47.482303 2911 reflector.go:148] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.483049 kubelet[2911]: W1002 20:10:47.483025 2911 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.483149 kubelet[2911]: E1002 20:10:47.483056 2911 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-26-158" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-158' and this object Oct 2 20:10:47.630939 kubelet[2911]: I1002 20:10:47.630890 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cni-path\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631105 kubelet[2911]: I1002 20:10:47.630962 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-xtables-lock\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631105 kubelet[2911]: I1002 20:10:47.630992 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-clustermesh-secrets\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631105 kubelet[2911]: I1002 20:10:47.631020 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-config-path\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631105 kubelet[2911]: I1002 20:10:47.631047 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-net\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631105 kubelet[2911]: I1002 20:10:47.631074 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rdcjb\" (UniqueName: \"kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-kube-api-access-rdcjb\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631105 kubelet[2911]: I1002 20:10:47.631103 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-bpf-maps\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631135 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-ipsec-secrets\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631162 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-run\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631191 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-kernel\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631224 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-cgroup\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631267 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-etc-cni-netd\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631301 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hostproc\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631415 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-lib-modules\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.631497 kubelet[2911]: I1002 20:10:47.631455 2911 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hubble-tls\") pod \"cilium-ndwn8\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " pod="kube-system/cilium-ndwn8" Oct 2 20:10:47.801204 kubelet[2911]: E1002 20:10:47.801040 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:48.149281 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:10:48.149822 kernel: audit: type=1400 audit(1696277448.145:1301): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.145000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.163893 kernel: audit: type=1300 audit(1696277448.145:1301): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c7a940 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:48.145000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c7a940 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:48.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:48.172374 kernel: audit: type=1327 audit(1696277448.145:1301): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:48.172538 kernel: audit: type=1400 audit(1696277448.145:1302): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.145000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.203180 kernel: audit: type=1300 audit(1696277448.145:1302): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c7a960 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:48.145000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c7a960 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:48.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:48.145000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.224682 kernel: audit: type=1327 audit(1696277448.145:1302): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:48.224896 kernel: audit: type=1400 audit(1696277448.145:1303): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.224937 kernel: audit: type=1300 audit(1696277448.145:1303): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c7aaa0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:48.145000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c7aaa0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:48.233518 kernel: audit: type=1327 audit(1696277448.145:1303): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:48.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:48.146000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.246479 kernel: audit: type=1400 audit(1696277448.146:1304): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:48.146000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026394a0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:10:48.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:48.736542 kubelet[2911]: E1002 20:10:48.736433 2911 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 20:10:48.737060 kubelet[2911]: E1002 20:10:48.736633 2911 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-ipsec-secrets podName:3f2bd058-cd1a-4771-a527-dbca720ddfc3 nodeName:}" failed. No retries permitted until 2023-10-02 20:10:49.236605628 +0000 UTC m=+251.953526584 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-ipsec-secrets") pod "cilium-ndwn8" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:10:48.737060 kubelet[2911]: E1002 20:10:48.736433 2911 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 20:10:48.737060 kubelet[2911]: E1002 20:10:48.736935 2911 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-clustermesh-secrets podName:3f2bd058-cd1a-4771-a527-dbca720ddfc3 nodeName:}" failed. No retries permitted until 2023-10-02 20:10:49.236917698 +0000 UTC m=+251.953838651 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-clustermesh-secrets") pod "cilium-ndwn8" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:10:49.270954 env[1635]: time="2023-10-02T20:10:49.270899420Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ndwn8,Uid:3f2bd058-cd1a-4771-a527-dbca720ddfc3,Namespace:kube-system,Attempt:0,}" Oct 2 20:10:49.299541 env[1635]: time="2023-10-02T20:10:49.299455083Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:10:49.299771 env[1635]: time="2023-10-02T20:10:49.299505879Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:10:49.299771 env[1635]: time="2023-10-02T20:10:49.299537319Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:10:49.299925 env[1635]: time="2023-10-02T20:10:49.299769298Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c pid=3933 runtime=io.containerd.runc.v2 Oct 2 20:10:49.329909 systemd[1]: Started cri-containerd-acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c.scope. Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.344000 audit: BPF prog-id=134 op=LOAD Oct 2 20:10:49.345000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.345000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3933 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:49.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623638653433643735333962376666336663393231383039653836 Oct 2 20:10:49.345000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.345000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3933 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:49.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623638653433643735333962376666336663393231383039653836 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit: BPF prog-id=135 op=LOAD Oct 2 20:10:49.346000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003b89d0 items=0 ppid=3933 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:49.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623638653433643735333962376666336663393231383039653836 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.346000 audit: BPF prog-id=136 op=LOAD Oct 2 20:10:49.346000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003b8a18 items=0 ppid=3933 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:49.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623638653433643735333962376666336663393231383039653836 Oct 2 20:10:49.347000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:10:49.347000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:49.347000 audit: BPF prog-id=137 op=LOAD Oct 2 20:10:49.347000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003b8e28 items=0 ppid=3933 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:49.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623638653433643735333962376666336663393231383039653836 Oct 2 20:10:49.369680 env[1635]: time="2023-10-02T20:10:49.369638588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ndwn8,Uid:3f2bd058-cd1a-4771-a527-dbca720ddfc3,Namespace:kube-system,Attempt:0,} returns sandbox id \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\"" Oct 2 20:10:49.376856 env[1635]: time="2023-10-02T20:10:49.376741979Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:10:49.394432 env[1635]: time="2023-10-02T20:10:49.394389126Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\"" Oct 2 20:10:49.395536 env[1635]: time="2023-10-02T20:10:49.395483486Z" level=info msg="StartContainer for \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\"" Oct 2 20:10:49.425683 systemd[1]: Started cri-containerd-bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05.scope. Oct 2 20:10:49.445470 systemd[1]: cri-containerd-bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05.scope: Deactivated successfully. Oct 2 20:10:49.486568 env[1635]: time="2023-10-02T20:10:49.486478073Z" level=info msg="shim disconnected" id=bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05 Oct 2 20:10:49.486568 env[1635]: time="2023-10-02T20:10:49.486555715Z" level=warning msg="cleaning up after shim disconnected" id=bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05 namespace=k8s.io Oct 2 20:10:49.486568 env[1635]: time="2023-10-02T20:10:49.486569770Z" level=info msg="cleaning up dead shim" Oct 2 20:10:49.496809 env[1635]: time="2023-10-02T20:10:49.496715211Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3993 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:49.497122 env[1635]: time="2023-10-02T20:10:49.497015153Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 20:10:49.500434 env[1635]: time="2023-10-02T20:10:49.500358665Z" level=error msg="Failed to pipe stderr of container \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\"" error="reading from a closed fifo" Oct 2 20:10:49.500652 env[1635]: time="2023-10-02T20:10:49.500461882Z" level=error msg="Failed to pipe stdout of container \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\"" error="reading from a closed fifo" Oct 2 20:10:49.503043 env[1635]: time="2023-10-02T20:10:49.502990544Z" level=error msg="StartContainer for \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:49.503447 kubelet[2911]: E1002 20:10:49.503420 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05" Oct 2 20:10:49.504325 kubelet[2911]: E1002 20:10:49.504302 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:49.504325 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:49.504325 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:10:49.504325 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rdcjb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:49.504667 kubelet[2911]: E1002 20:10:49.504437 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:10:50.258613 systemd[1]: run-containerd-runc-k8s.io-acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c-runc.xykJT4.mount: Deactivated successfully. Oct 2 20:10:50.452554 env[1635]: time="2023-10-02T20:10:50.452508561Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:10:50.472590 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2902975291.mount: Deactivated successfully. Oct 2 20:10:50.485889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3435685012.mount: Deactivated successfully. Oct 2 20:10:50.487080 env[1635]: time="2023-10-02T20:10:50.487037643Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\"" Oct 2 20:10:50.492809 env[1635]: time="2023-10-02T20:10:50.491679620Z" level=info msg="StartContainer for \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\"" Oct 2 20:10:50.526623 systemd[1]: Started cri-containerd-b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832.scope. Oct 2 20:10:50.543710 systemd[1]: cri-containerd-b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832.scope: Deactivated successfully. Oct 2 20:10:50.564602 env[1635]: time="2023-10-02T20:10:50.564545138Z" level=info msg="shim disconnected" id=b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832 Oct 2 20:10:50.564602 env[1635]: time="2023-10-02T20:10:50.564597392Z" level=warning msg="cleaning up after shim disconnected" id=b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832 namespace=k8s.io Oct 2 20:10:50.564602 env[1635]: time="2023-10-02T20:10:50.564611519Z" level=info msg="cleaning up dead shim" Oct 2 20:10:50.584380 env[1635]: time="2023-10-02T20:10:50.584324493Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4031 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:50.584722 env[1635]: time="2023-10-02T20:10:50.584651962Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 20:10:50.586377 env[1635]: time="2023-10-02T20:10:50.586323734Z" level=error msg="Failed to pipe stderr of container \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\"" error="reading from a closed fifo" Oct 2 20:10:50.586377 env[1635]: time="2023-10-02T20:10:50.586325746Z" level=error msg="Failed to pipe stdout of container \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\"" error="reading from a closed fifo" Oct 2 20:10:50.589380 env[1635]: time="2023-10-02T20:10:50.589336036Z" level=error msg="StartContainer for \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:50.589610 kubelet[2911]: E1002 20:10:50.589585 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832" Oct 2 20:10:50.590786 kubelet[2911]: E1002 20:10:50.590405 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:50.590786 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:50.590786 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:10:50.590786 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rdcjb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:50.590786 kubelet[2911]: E1002 20:10:50.590465 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:10:51.451326 kubelet[2911]: I1002 20:10:51.451288 2911 scope.go:115] "RemoveContainer" containerID="bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05" Oct 2 20:10:51.451773 kubelet[2911]: I1002 20:10:51.451748 2911 scope.go:115] "RemoveContainer" containerID="bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05" Oct 2 20:10:51.453439 env[1635]: time="2023-10-02T20:10:51.453222099Z" level=info msg="RemoveContainer for \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\"" Oct 2 20:10:51.454188 env[1635]: time="2023-10-02T20:10:51.454154941Z" level=info msg="RemoveContainer for \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\"" Oct 2 20:10:51.454433 env[1635]: time="2023-10-02T20:10:51.454398957Z" level=error msg="RemoveContainer for \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\" failed" error="failed to set removing state for container \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\": container is already in removing state" Oct 2 20:10:51.455272 kubelet[2911]: E1002 20:10:51.454660 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\": container is already in removing state" containerID="bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05" Oct 2 20:10:51.455272 kubelet[2911]: E1002 20:10:51.454702 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05": container is already in removing state; Skipping pod "cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)" Oct 2 20:10:51.455272 kubelet[2911]: E1002 20:10:51.455069 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:10:51.458075 env[1635]: time="2023-10-02T20:10:51.458043066Z" level=info msg="RemoveContainer for \"bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05\" returns successfully" Oct 2 20:10:52.455321 kubelet[2911]: E1002 20:10:52.455294 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:10:52.595072 kubelet[2911]: W1002 20:10:52.595026 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3f2bd058_cd1a_4771_a527_dbca720ddfc3.slice/cri-containerd-bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05.scope WatchSource:0}: container "bdf2aa81ba6983d86e15fa7591155c6722d1ea0a02641289444a342a708fad05" in namespace "k8s.io": not found Oct 2 20:10:52.802504 kubelet[2911]: E1002 20:10:52.802368 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:55.701956 kubelet[2911]: W1002 20:10:55.701899 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3f2bd058_cd1a_4771_a527_dbca720ddfc3.slice/cri-containerd-b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832.scope WatchSource:0}: task b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832 not found: not found Oct 2 20:10:57.803789 kubelet[2911]: E1002 20:10:57.803755 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:02.805414 kubelet[2911]: E1002 20:11:02.805384 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:05.638403 env[1635]: time="2023-10-02T20:11:05.637880916Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:11:05.660485 env[1635]: time="2023-10-02T20:11:05.660425617Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\"" Oct 2 20:11:05.661115 env[1635]: time="2023-10-02T20:11:05.661078652Z" level=info msg="StartContainer for \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\"" Oct 2 20:11:05.699028 systemd[1]: Started cri-containerd-d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f.scope. Oct 2 20:11:05.711470 systemd[1]: cri-containerd-d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f.scope: Deactivated successfully. Oct 2 20:11:05.732433 env[1635]: time="2023-10-02T20:11:05.732367978Z" level=info msg="shim disconnected" id=d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f Oct 2 20:11:05.732433 env[1635]: time="2023-10-02T20:11:05.732432218Z" level=warning msg="cleaning up after shim disconnected" id=d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f namespace=k8s.io Oct 2 20:11:05.732763 env[1635]: time="2023-10-02T20:11:05.732443995Z" level=info msg="cleaning up dead shim" Oct 2 20:11:05.741850 env[1635]: time="2023-10-02T20:11:05.741799232Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4072 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:05.742158 env[1635]: time="2023-10-02T20:11:05.742089838Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 20:11:05.742455 env[1635]: time="2023-10-02T20:11:05.742387086Z" level=error msg="Failed to pipe stdout of container \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\"" error="reading from a closed fifo" Oct 2 20:11:05.744344 env[1635]: time="2023-10-02T20:11:05.743180835Z" level=error msg="Failed to pipe stderr of container \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\"" error="reading from a closed fifo" Oct 2 20:11:05.746778 env[1635]: time="2023-10-02T20:11:05.746700838Z" level=error msg="StartContainer for \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:05.747118 kubelet[2911]: E1002 20:11:05.747095 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f" Oct 2 20:11:05.747529 kubelet[2911]: E1002 20:11:05.747213 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:05.747529 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:05.747529 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:11:05.747529 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rdcjb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:05.747529 kubelet[2911]: E1002 20:11:05.747289 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:11:06.493596 kubelet[2911]: I1002 20:11:06.493557 2911 scope.go:115] "RemoveContainer" containerID="b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832" Oct 2 20:11:06.494148 kubelet[2911]: I1002 20:11:06.494123 2911 scope.go:115] "RemoveContainer" containerID="b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832" Oct 2 20:11:06.506381 env[1635]: time="2023-10-02T20:11:06.498843872Z" level=info msg="RemoveContainer for \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\"" Oct 2 20:11:06.506381 env[1635]: time="2023-10-02T20:11:06.500290230Z" level=info msg="RemoveContainer for \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\"" Oct 2 20:11:06.506381 env[1635]: time="2023-10-02T20:11:06.500432084Z" level=error msg="RemoveContainer for \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\" failed" error="failed to set removing state for container \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\": container is already in removing state" Oct 2 20:11:06.506830 kubelet[2911]: E1002 20:11:06.500814 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\": container is already in removing state" containerID="b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832" Oct 2 20:11:06.506830 kubelet[2911]: E1002 20:11:06.500854 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832": container is already in removing state; Skipping pod "cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)" Oct 2 20:11:06.506830 kubelet[2911]: E1002 20:11:06.501669 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:11:06.515282 env[1635]: time="2023-10-02T20:11:06.515214282Z" level=info msg="RemoveContainer for \"b4f98516488ad67b8042bc04ebd69aa3e91e15f429d08da7a12c0935d71ad832\" returns successfully" Oct 2 20:11:06.649879 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f-rootfs.mount: Deactivated successfully. Oct 2 20:11:07.807404 kubelet[2911]: E1002 20:11:07.807370 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:08.838803 kubelet[2911]: W1002 20:11:08.838758 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3f2bd058_cd1a_4771_a527_dbca720ddfc3.slice/cri-containerd-d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f.scope WatchSource:0}: task d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f not found: not found Oct 2 20:11:12.809144 kubelet[2911]: E1002 20:11:12.809112 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:17.810927 kubelet[2911]: E1002 20:11:17.810892 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:18.634319 kubelet[2911]: E1002 20:11:18.633830 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:11:22.811847 kubelet[2911]: E1002 20:11:22.811812 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:27.813252 kubelet[2911]: E1002 20:11:27.813204 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:29.637350 env[1635]: time="2023-10-02T20:11:29.637303937Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:11:29.656622 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3927767802.mount: Deactivated successfully. Oct 2 20:11:29.667430 env[1635]: time="2023-10-02T20:11:29.667378496Z" level=info msg="CreateContainer within sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\"" Oct 2 20:11:29.670236 env[1635]: time="2023-10-02T20:11:29.668305907Z" level=info msg="StartContainer for \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\"" Oct 2 20:11:29.712866 systemd[1]: Started cri-containerd-e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779.scope. Oct 2 20:11:29.733015 systemd[1]: cri-containerd-e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779.scope: Deactivated successfully. Oct 2 20:11:29.754345 env[1635]: time="2023-10-02T20:11:29.754280165Z" level=info msg="shim disconnected" id=e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779 Oct 2 20:11:29.754345 env[1635]: time="2023-10-02T20:11:29.754335687Z" level=warning msg="cleaning up after shim disconnected" id=e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779 namespace=k8s.io Oct 2 20:11:29.754345 env[1635]: time="2023-10-02T20:11:29.754348318Z" level=info msg="cleaning up dead shim" Oct 2 20:11:29.764749 env[1635]: time="2023-10-02T20:11:29.764688643Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4110 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:29.765050 env[1635]: time="2023-10-02T20:11:29.764985940Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 20:11:29.765344 env[1635]: time="2023-10-02T20:11:29.765304013Z" level=error msg="Failed to pipe stderr of container \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\"" error="reading from a closed fifo" Oct 2 20:11:29.765461 env[1635]: time="2023-10-02T20:11:29.765325637Z" level=error msg="Failed to pipe stdout of container \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\"" error="reading from a closed fifo" Oct 2 20:11:29.767894 env[1635]: time="2023-10-02T20:11:29.767844218Z" level=error msg="StartContainer for \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:29.768129 kubelet[2911]: E1002 20:11:29.768096 2911 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779" Oct 2 20:11:29.768744 kubelet[2911]: E1002 20:11:29.768230 2911 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:29.768744 kubelet[2911]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:29.768744 kubelet[2911]: rm /hostbin/cilium-mount Oct 2 20:11:29.768744 kubelet[2911]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rdcjb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:29.768744 kubelet[2911]: E1002 20:11:29.768324 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:11:30.551219 kubelet[2911]: I1002 20:11:30.551178 2911 scope.go:115] "RemoveContainer" containerID="d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f" Oct 2 20:11:30.551692 kubelet[2911]: I1002 20:11:30.551601 2911 scope.go:115] "RemoveContainer" containerID="d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f" Oct 2 20:11:30.553464 env[1635]: time="2023-10-02T20:11:30.553407241Z" level=info msg="RemoveContainer for \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\"" Oct 2 20:11:30.554080 env[1635]: time="2023-10-02T20:11:30.553551819Z" level=info msg="RemoveContainer for \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\"" Oct 2 20:11:30.554482 env[1635]: time="2023-10-02T20:11:30.554443896Z" level=error msg="RemoveContainer for \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\" failed" error="failed to set removing state for container \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\": container is already in removing state" Oct 2 20:11:30.554863 kubelet[2911]: E1002 20:11:30.554839 2911 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\": container is already in removing state" containerID="d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f" Oct 2 20:11:30.555017 kubelet[2911]: E1002 20:11:30.554940 2911 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f": container is already in removing state; Skipping pod "cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)" Oct 2 20:11:30.555448 kubelet[2911]: E1002 20:11:30.555425 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:11:30.563726 env[1635]: time="2023-10-02T20:11:30.563678630Z" level=info msg="RemoveContainer for \"d36220ac8e55e754c622793b6086cbdedc5377a2a67e4d36b772ec0497ae772f\" returns successfully" Oct 2 20:11:30.650940 systemd[1]: run-containerd-runc-k8s.io-e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779-runc.IwAP9H.mount: Deactivated successfully. Oct 2 20:11:30.651116 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779-rootfs.mount: Deactivated successfully. Oct 2 20:11:31.449000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:31.451986 kernel: kauditd_printk_skb: 59 callbacks suppressed Oct 2 20:11:31.452106 kernel: audit: type=1400 audit(1696277491.449:1323): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:31.449000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013a51d0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:31.469413 kernel: audit: type=1300 audit(1696277491.449:1323): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013a51d0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:31.449000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:31.495844 kernel: audit: type=1327 audit(1696277491.449:1323): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:31.496011 kernel: audit: type=1400 audit(1696277491.452:1324): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:31.452000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:31.452000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ff8d60 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:31.512711 kernel: audit: type=1300 audit(1696277491.452:1324): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ff8d60 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:31.513101 kernel: audit: type=1327 audit(1696277491.452:1324): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:31.452000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:32.814793 kubelet[2911]: E1002 20:11:32.814710 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:32.859822 kubelet[2911]: W1002 20:11:32.859781 2911 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3f2bd058_cd1a_4771_a527_dbca720ddfc3.slice/cri-containerd-e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779.scope WatchSource:0}: task e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779 not found: not found Oct 2 20:11:33.471000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.471000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c005c5dc80 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:11:33.489554 kernel: audit: type=1400 audit(1696277493.471:1325): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.489699 kernel: audit: type=1300 audit(1696277493.471:1325): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c005c5dc80 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:11:33.489744 kernel: audit: type=1327 audit(1696277493.471:1325): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:33.471000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:33.478000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.502843 kernel: audit: type=1400 audit(1696277493.478:1326): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.478000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c003a487b0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:11:33.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:33.478000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.478000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00395fd70 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:11:33.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:33.506000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.506000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c003a487e0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:11:33.506000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:33.674000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.674000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c003a488d0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:11:33.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:33.716000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:33.716000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c010149a00 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:11:33.716000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:37.521081 env[1635]: time="2023-10-02T20:11:37.521039125Z" level=info msg="StopPodSandbox for \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\"" Oct 2 20:11:37.525870 env[1635]: time="2023-10-02T20:11:37.521136828Z" level=info msg="TearDown network for sandbox \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" successfully" Oct 2 20:11:37.525870 env[1635]: time="2023-10-02T20:11:37.521179927Z" level=info msg="StopPodSandbox for \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" returns successfully" Oct 2 20:11:37.526153 env[1635]: time="2023-10-02T20:11:37.525908018Z" level=info msg="RemovePodSandbox for \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\"" Oct 2 20:11:37.526153 env[1635]: time="2023-10-02T20:11:37.526008225Z" level=info msg="Forcibly stopping sandbox \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\"" Oct 2 20:11:37.526153 env[1635]: time="2023-10-02T20:11:37.526116119Z" level=info msg="TearDown network for sandbox \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" successfully" Oct 2 20:11:37.544734 env[1635]: time="2023-10-02T20:11:37.544689155Z" level=info msg="RemovePodSandbox \"56369dcb7e7e59f5084940d3cd6ce2e60362f845c8161e112c20a6212bca3cb7\" returns successfully" Oct 2 20:11:37.546103 env[1635]: time="2023-10-02T20:11:37.546063570Z" level=info msg="StopPodSandbox for \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\"" Oct 2 20:11:37.546235 env[1635]: time="2023-10-02T20:11:37.546170081Z" level=info msg="TearDown network for sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" successfully" Oct 2 20:11:37.546235 env[1635]: time="2023-10-02T20:11:37.546214398Z" level=info msg="StopPodSandbox for \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" returns successfully" Oct 2 20:11:37.546670 env[1635]: time="2023-10-02T20:11:37.546640392Z" level=info msg="RemovePodSandbox for \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\"" Oct 2 20:11:37.546788 env[1635]: time="2023-10-02T20:11:37.546672332Z" level=info msg="Forcibly stopping sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\"" Oct 2 20:11:37.546788 env[1635]: time="2023-10-02T20:11:37.546756780Z" level=info msg="TearDown network for sandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" successfully" Oct 2 20:11:37.551582 env[1635]: time="2023-10-02T20:11:37.551537088Z" level=info msg="RemovePodSandbox \"b2626b372e0d4d6c226a06d78e08ae9ad8abfbbb188e5565e78b830b16d7ecd2\" returns successfully" Oct 2 20:11:37.815807 kubelet[2911]: E1002 20:11:37.815693 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:41.633850 kubelet[2911]: E1002 20:11:41.633814 2911 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-ndwn8_kube-system(3f2bd058-cd1a-4771-a527-dbca720ddfc3)\"" pod="kube-system/cilium-ndwn8" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 Oct 2 20:11:42.816829 kubelet[2911]: E1002 20:11:42.816641 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:47.819231 kubelet[2911]: E1002 20:11:47.819159 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:48.146000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.148918 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:11:48.149183 kernel: audit: type=1400 audit(1696277508.146:1332): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.146000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.160496 kernel: audit: type=1400 audit(1696277508.146:1331): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.160625 kernel: audit: type=1300 audit(1696277508.146:1331): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfe460 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:48.146000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfe460 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:48.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:48.173349 kernel: audit: type=1327 audit(1696277508.146:1331): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:48.173457 kernel: audit: type=1400 audit(1696277508.147:1333): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.147000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.147000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfebe0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:48.185828 kernel: audit: type=1300 audit(1696277508.147:1333): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfebe0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:48.185943 kernel: audit: type=1327 audit(1696277508.147:1333): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:48.147000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:48.146000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c31fc0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:48.198420 kernel: audit: type=1300 audit(1696277508.146:1332): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c31fc0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:48.198534 kernel: audit: type=1327 audit(1696277508.146:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:48.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:48.150000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.209590 kernel: audit: type=1400 audit(1696277508.150:1334): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:48.150000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c31fe0 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:11:48.150000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:49.096607 env[1635]: time="2023-10-02T20:11:49.096560689Z" level=info msg="StopPodSandbox for \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\"" Oct 2 20:11:49.097209 env[1635]: time="2023-10-02T20:11:49.097174052Z" level=info msg="Container to stop \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:49.099322 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c-shm.mount: Deactivated successfully. Oct 2 20:11:49.115000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:11:49.118000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:11:49.116526 systemd[1]: cri-containerd-acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c.scope: Deactivated successfully. Oct 2 20:11:49.157576 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c-rootfs.mount: Deactivated successfully. Oct 2 20:11:49.181939 env[1635]: time="2023-10-02T20:11:49.181880736Z" level=info msg="shim disconnected" id=acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c Oct 2 20:11:49.182286 env[1635]: time="2023-10-02T20:11:49.182261627Z" level=warning msg="cleaning up after shim disconnected" id=acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c namespace=k8s.io Oct 2 20:11:49.182415 env[1635]: time="2023-10-02T20:11:49.182399306Z" level=info msg="cleaning up dead shim" Oct 2 20:11:49.189746 sshd[3913]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:49.192000 audit[3913]: USER_END pid=3913 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:49.192000 audit[3913]: CRED_DISP pid=3913 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:49.195778 env[1635]: time="2023-10-02T20:11:49.195737194Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4143 runtime=io.containerd.runc.v2\n" Oct 2 20:11:49.198001 env[1635]: time="2023-10-02T20:11:49.196269265Z" level=info msg="TearDown network for sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" successfully" Oct 2 20:11:49.198001 env[1635]: time="2023-10-02T20:11:49.196936120Z" level=info msg="StopPodSandbox for \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" returns successfully" Oct 2 20:11:49.198211 systemd[1]: sshd@30-172.31.26.158:22-139.178.89.65:33206.service: Deactivated successfully. Oct 2 20:11:49.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.26.158:22-139.178.89.65:33206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:49.199435 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:11:49.202891 systemd-logind[1628]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:11:49.204852 systemd-logind[1628]: Removed session 30. Oct 2 20:11:49.232113 kubelet[2911]: I1002 20:11:49.232057 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-cgroup\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232113 kubelet[2911]: I1002 20:11:49.232118 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cni-path\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232152 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-clustermesh-secrets\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232176 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hostproc\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232205 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hubble-tls\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232234 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-net\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232295 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-kernel\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232329 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rdcjb\" (UniqueName: \"kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-kube-api-access-rdcjb\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232356 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-ipsec-secrets\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232383 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-lib-modules\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232410 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-bpf-maps\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232440 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-xtables-lock\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232491 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-run\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232534 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-config-path\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232559 2911 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-etc-cni-netd\") pod \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\" (UID: \"3f2bd058-cd1a-4771-a527-dbca720ddfc3\") " Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232630 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232664 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.232708 kubelet[2911]: I1002 20:11:49.232686 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cni-path" (OuterVolumeSpecName: "cni-path") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.234822 kubelet[2911]: I1002 20:11:49.233674 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.234822 kubelet[2911]: I1002 20:11:49.233714 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.234822 kubelet[2911]: I1002 20:11:49.233737 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.234822 kubelet[2911]: I1002 20:11:49.233759 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.234822 kubelet[2911]: W1002 20:11:49.234017 2911 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/3f2bd058-cd1a-4771-a527-dbca720ddfc3/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:11:49.236576 kubelet[2911]: I1002 20:11:49.235616 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hostproc" (OuterVolumeSpecName: "hostproc") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.237514 kubelet[2911]: I1002 20:11:49.237480 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:49.237604 kubelet[2911]: I1002 20:11:49.237539 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.237604 kubelet[2911]: I1002 20:11:49.237568 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:49.244886 systemd[1]: var-lib-kubelet-pods-3f2bd058\x2dcd1a\x2d4771\x2da527\x2ddbca720ddfc3-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:49.246029 kubelet[2911]: I1002 20:11:49.245993 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:49.249989 systemd[1]: var-lib-kubelet-pods-3f2bd058\x2dcd1a\x2d4771\x2da527\x2ddbca720ddfc3-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:49.253755 kubelet[2911]: I1002 20:11:49.253713 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:49.256812 systemd[1]: var-lib-kubelet-pods-3f2bd058\x2dcd1a\x2d4771\x2da527\x2ddbca720ddfc3-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drdcjb.mount: Deactivated successfully. Oct 2 20:11:49.258308 kubelet[2911]: I1002 20:11:49.258262 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-kube-api-access-rdcjb" (OuterVolumeSpecName: "kube-api-access-rdcjb") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "kube-api-access-rdcjb". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:49.259199 kubelet[2911]: I1002 20:11:49.258917 2911 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "3f2bd058-cd1a-4771-a527-dbca720ddfc3" (UID: "3f2bd058-cd1a-4771-a527-dbca720ddfc3"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:49.332782 kubelet[2911]: I1002 20:11:49.332736 2911 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-kernel\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.332782 kubelet[2911]: I1002 20:11:49.332787 2911 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-rdcjb\" (UniqueName: \"kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-kube-api-access-rdcjb\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332804 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-ipsec-secrets\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332817 2911 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-lib-modules\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332829 2911 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-bpf-maps\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332842 2911 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-xtables-lock\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332854 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-run\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332867 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-config-path\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332880 2911 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-etc-cni-netd\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332892 2911 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cilium-cgroup\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332904 2911 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-cni-path\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332919 2911 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/3f2bd058-cd1a-4771-a527-dbca720ddfc3-clustermesh-secrets\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332934 2911 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hubble-tls\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332947 2911 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-host-proc-sys-net\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.333023 kubelet[2911]: I1002 20:11:49.332959 2911 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/3f2bd058-cd1a-4771-a527-dbca720ddfc3-hostproc\") on node \"ip-172-31-26-158\" DevicePath \"\"" Oct 2 20:11:49.603181 kubelet[2911]: I1002 20:11:49.603129 2911 scope.go:115] "RemoveContainer" containerID="e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779" Oct 2 20:11:49.604832 env[1635]: time="2023-10-02T20:11:49.604789154Z" level=info msg="RemoveContainer for \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\"" Oct 2 20:11:49.619629 env[1635]: time="2023-10-02T20:11:49.619579634Z" level=info msg="RemoveContainer for \"e44bd0dece3e5dd30b105233c3c4ade1c7125371a79a6ebfbe184ced10243779\" returns successfully" Oct 2 20:11:49.626962 systemd[1]: Removed slice kubepods-burstable-pod3f2bd058_cd1a_4771_a527_dbca720ddfc3.slice. Oct 2 20:11:50.099339 systemd[1]: var-lib-kubelet-pods-3f2bd058\x2dcd1a\x2d4771\x2da527\x2ddbca720ddfc3-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:11:51.636319 kubelet[2911]: I1002 20:11:51.636287 2911 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=3f2bd058-cd1a-4771-a527-dbca720ddfc3 path="/var/lib/kubelet/pods/3f2bd058-cd1a-4771-a527-dbca720ddfc3/volumes" Oct 2 20:11:52.821945 kubelet[2911]: E1002 20:11:52.821901 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:57.823236 kubelet[2911]: E1002 20:11:57.823203 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:02.824836 kubelet[2911]: E1002 20:12:02.824800 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:07.825885 kubelet[2911]: E1002 20:12:07.825836 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:12.827152 kubelet[2911]: E1002 20:12:12.827121 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:17.828630 kubelet[2911]: E1002 20:12:17.828595 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:22.829594 kubelet[2911]: E1002 20:12:22.829564 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:27.830804 kubelet[2911]: E1002 20:12:27.830770 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:31.450000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:31.452739 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 20:12:31.452840 kernel: audit: type=1400 audit(1696277551.450:1340): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:31.450000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bc4960 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:12:31.475575 kernel: audit: type=1300 audit(1696277551.450:1340): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bc4960 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:12:31.475828 kernel: audit: type=1327 audit(1696277551.450:1340): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:31.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:31.453000 audit[2534]: AVC avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:31.505682 kernel: audit: type=1400 audit(1696277551.453:1341): avc: denied { watch } for pid=2534 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:31.505834 kernel: audit: type=1300 audit(1696277551.453:1341): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002461d80 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:12:31.453000 audit[2534]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002461d80 a2=fc6 a3=0 items=0 ppid=2376 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:12:31.453000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:31.532081 kernel: audit: type=1327 audit(1696277551.453:1341): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:32.831702 kubelet[2911]: E1002 20:12:32.831668 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:33.472000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.472000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c004ce43a0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:12:33.499334 kernel: audit: type=1400 audit(1696277553.472:1342): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.499498 kernel: audit: type=1300 audit(1696277553.472:1342): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c004ce43a0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:12:33.499534 kernel: audit: type=1327 audit(1696277553.472:1342): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:12:33.472000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:12:33.485000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.516052 kernel: audit: type=1400 audit(1696277553.485:1343): avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.485000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c003dc6a80 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:12:33.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:12:33.485000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.485000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c007fb62d0 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:12:33.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:12:33.504000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.504000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c007fb6360 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:12:33.504000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:12:33.675000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.675000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c007fb6450 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:12:33.675000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:12:33.717000 audit[2481]: AVC avc: denied { watch } for pid=2481 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:33.717000 audit[2481]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c005341500 a2=fc6 a3=0 items=0 ppid=2343 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c843 key=(null) Oct 2 20:12:33.717000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:12:34.195214 systemd[1]: cri-containerd-cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb.scope: Deactivated successfully. Oct 2 20:12:34.195710 systemd[1]: cri-containerd-cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb.scope: Consumed 4.938s CPU time. Oct 2 20:12:34.200000 audit: BPF prog-id=93 op=UNLOAD Oct 2 20:12:34.200000 audit: BPF prog-id=105 op=UNLOAD Oct 2 20:12:34.242259 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb-rootfs.mount: Deactivated successfully. Oct 2 20:12:34.271740 env[1635]: time="2023-10-02T20:12:34.271682507Z" level=info msg="shim disconnected" id=cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb Oct 2 20:12:34.271740 env[1635]: time="2023-10-02T20:12:34.271737581Z" level=warning msg="cleaning up after shim disconnected" id=cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb namespace=k8s.io Oct 2 20:12:34.272554 env[1635]: time="2023-10-02T20:12:34.271748954Z" level=info msg="cleaning up dead shim" Oct 2 20:12:34.281875 env[1635]: time="2023-10-02T20:12:34.281827487Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4177 runtime=io.containerd.runc.v2\n" Oct 2 20:12:34.690309 kubelet[2911]: I1002 20:12:34.689526 2911 scope.go:115] "RemoveContainer" containerID="cfa39e449d5535fdfc36496158474ecb4d46f4f307c9de19af3305c357c05cbb" Oct 2 20:12:34.695071 env[1635]: time="2023-10-02T20:12:34.695026837Z" level=info msg="CreateContainer within sandbox \"9872079ff7ed18a58290700f36b63e88890bade3558781a5f1b9b394ccb9fd00\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:12:34.713341 kubelet[2911]: E1002 20:12:34.713024 2911 request.go:1092] Unexpected error when reading response body: net/http: request canceled (Client.Timeout or context cancellation while reading body) Oct 2 20:12:34.713341 kubelet[2911]: E1002 20:12:34.713104 2911 controller.go:193] "Failed to update lease" err="unexpected error when reading response body. Please retry. Original error: net/http: request canceled (Client.Timeout or context cancellation while reading body)" Oct 2 20:12:34.716543 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1430714276.mount: Deactivated successfully. Oct 2 20:12:34.726473 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2913224295.mount: Deactivated successfully. Oct 2 20:12:34.735119 env[1635]: time="2023-10-02T20:12:34.735068180Z" level=info msg="CreateContainer within sandbox \"9872079ff7ed18a58290700f36b63e88890bade3558781a5f1b9b394ccb9fd00\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"a2eec2bc25770fd46876513cd4c318017502e63738b448c6811c19165783f3f4\"" Oct 2 20:12:34.736554 env[1635]: time="2023-10-02T20:12:34.736512758Z" level=info msg="StartContainer for \"a2eec2bc25770fd46876513cd4c318017502e63738b448c6811c19165783f3f4\"" Oct 2 20:12:34.767414 systemd[1]: Started cri-containerd-a2eec2bc25770fd46876513cd4c318017502e63738b448c6811c19165783f3f4.scope. Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.790000 audit: BPF prog-id=138 op=LOAD Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2376 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:34.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132656563326263323537373066643436383736353133636434633331 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2376 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:34.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132656563326263323537373066643436383736353133636434633331 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit: BPF prog-id=139 op=LOAD Oct 2 20:12:34.791000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0000a0360 items=0 ppid=2376 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:34.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132656563326263323537373066643436383736353133636434633331 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit: BPF prog-id=140 op=LOAD Oct 2 20:12:34.791000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0000a03a8 items=0 ppid=2376 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:34.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132656563326263323537373066643436383736353133636434633331 Oct 2 20:12:34.791000 audit: BPF prog-id=140 op=UNLOAD Oct 2 20:12:34.791000 audit: BPF prog-id=139 op=UNLOAD Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:34.791000 audit: BPF prog-id=141 op=LOAD Oct 2 20:12:34.791000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0000a07b8 items=0 ppid=2376 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:34.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132656563326263323537373066643436383736353133636434633331 Oct 2 20:12:34.863746 env[1635]: time="2023-10-02T20:12:34.863696411Z" level=info msg="StartContainer for \"a2eec2bc25770fd46876513cd4c318017502e63738b448c6811c19165783f3f4\" returns successfully" Oct 2 20:12:36.190000 audit[4207]: AVC avc: denied { watch } for pid=4207 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:36.190000 audit[4207]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009b8000 a2=fc6 a3=0 items=0 ppid=2376 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:12:36.190000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:36.190000 audit[4207]: AVC avc: denied { watch } for pid=4207 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:36.190000 audit[4207]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00025b940 a2=fc6 a3=0 items=0 ppid=2376 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c907 key=(null) Oct 2 20:12:36.190000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:37.554696 env[1635]: time="2023-10-02T20:12:37.554648518Z" level=info msg="StopPodSandbox for \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\"" Oct 2 20:12:37.555180 env[1635]: time="2023-10-02T20:12:37.554832411Z" level=info msg="TearDown network for sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" successfully" Oct 2 20:12:37.555180 env[1635]: time="2023-10-02T20:12:37.554882893Z" level=info msg="StopPodSandbox for \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" returns successfully" Oct 2 20:12:37.555820 env[1635]: time="2023-10-02T20:12:37.555784511Z" level=info msg="RemovePodSandbox for \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\"" Oct 2 20:12:37.557523 env[1635]: time="2023-10-02T20:12:37.555822320Z" level=info msg="Forcibly stopping sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\"" Oct 2 20:12:37.557523 env[1635]: time="2023-10-02T20:12:37.556495702Z" level=info msg="TearDown network for sandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" successfully" Oct 2 20:12:37.568110 env[1635]: time="2023-10-02T20:12:37.568027245Z" level=info msg="RemovePodSandbox \"acb68e43d7539b7ff3fc921809e866fa60197ac30772d04510816a4260d6d26c\" returns successfully" Oct 2 20:12:37.833660 kubelet[2911]: E1002 20:12:37.833535 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:39.482127 systemd[1]: cri-containerd-c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9.scope: Deactivated successfully. Oct 2 20:12:39.482488 systemd[1]: cri-containerd-c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9.scope: Consumed 1.648s CPU time. Oct 2 20:12:39.485000 audit: BPF prog-id=89 op=UNLOAD Oct 2 20:12:39.489175 kernel: kauditd_printk_skb: 79 callbacks suppressed Oct 2 20:12:39.489354 kernel: audit: type=1334 audit(1696277559.485:1370): prog-id=89 op=UNLOAD Oct 2 20:12:39.493775 kernel: audit: type=1334 audit(1696277559.485:1371): prog-id=106 op=UNLOAD Oct 2 20:12:39.485000 audit: BPF prog-id=106 op=UNLOAD Oct 2 20:12:39.528974 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9-rootfs.mount: Deactivated successfully. Oct 2 20:12:39.571432 env[1635]: time="2023-10-02T20:12:39.571379530Z" level=info msg="shim disconnected" id=c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9 Oct 2 20:12:39.572090 env[1635]: time="2023-10-02T20:12:39.572049131Z" level=warning msg="cleaning up after shim disconnected" id=c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9 namespace=k8s.io Oct 2 20:12:39.572090 env[1635]: time="2023-10-02T20:12:39.572075364Z" level=info msg="cleaning up dead shim" Oct 2 20:12:39.581683 env[1635]: time="2023-10-02T20:12:39.581624170Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4239 runtime=io.containerd.runc.v2\n" Oct 2 20:12:39.704891 kubelet[2911]: I1002 20:12:39.704866 2911 scope.go:115] "RemoveContainer" containerID="c1afbc912eb4ae6d8c1c97f632d3e5c37e4da63cdf40ecc468ef9a57b57223b9" Oct 2 20:12:39.708287 env[1635]: time="2023-10-02T20:12:39.708224481Z" level=info msg="CreateContainer within sandbox \"9937a53c972540c13a396e6b2b9f7949a665e01091ce8f15cd8cd342eda7ea22\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:12:39.732416 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2156676530.mount: Deactivated successfully. Oct 2 20:12:39.742956 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1726110258.mount: Deactivated successfully. Oct 2 20:12:39.749303 env[1635]: time="2023-10-02T20:12:39.749230057Z" level=info msg="CreateContainer within sandbox \"9937a53c972540c13a396e6b2b9f7949a665e01091ce8f15cd8cd342eda7ea22\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"206701ddf5c412f05a1dbf617e22694fef2d4de5b917d0f1abb848a0a6cba797\"" Oct 2 20:12:39.753414 env[1635]: time="2023-10-02T20:12:39.753371796Z" level=info msg="StartContainer for \"206701ddf5c412f05a1dbf617e22694fef2d4de5b917d0f1abb848a0a6cba797\"" Oct 2 20:12:39.782968 systemd[1]: Started cri-containerd-206701ddf5c412f05a1dbf617e22694fef2d4de5b917d0f1abb848a0a6cba797.scope. Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812319 kernel: audit: type=1400 audit(1696277559.804:1372): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.824590 kernel: audit: type=1400 audit(1696277559.804:1373): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.824747 kernel: audit: type=1400 audit(1696277559.804:1374): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.831764 kernel: audit: type=1400 audit(1696277559.804:1375): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.831937 kernel: audit: type=1400 audit(1696277559.804:1376): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.838975 kernel: audit: type=1400 audit(1696277559.804:1377): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.844572 kernel: audit: type=1400 audit(1696277559.804:1378): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.858617 kernel: audit: type=1400 audit(1696277559.804:1379): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.810000 audit: BPF prog-id=142 op=LOAD Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2363 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:39.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363730316464663563343132663035613164626636313765323236 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2363 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:39.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363730316464663563343132663035613164626636313765323236 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.812000 audit: BPF prog-id=143 op=LOAD Oct 2 20:12:39.812000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000300370 items=0 ppid=2363 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:39.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363730316464663563343132663035613164626636313765323236 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit: BPF prog-id=144 op=LOAD Oct 2 20:12:39.817000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003003b8 items=0 ppid=2363 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:39.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363730316464663563343132663035613164626636313765323236 Oct 2 20:12:39.817000 audit: BPF prog-id=144 op=UNLOAD Oct 2 20:12:39.817000 audit: BPF prog-id=143 op=UNLOAD Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:39.817000 audit: BPF prog-id=145 op=LOAD Oct 2 20:12:39.817000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003007c8 items=0 ppid=2363 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:39.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363730316464663563343132663035613164626636313765323236 Oct 2 20:12:39.907514 env[1635]: time="2023-10-02T20:12:39.907456316Z" level=info msg="StartContainer for \"206701ddf5c412f05a1dbf617e22694fef2d4de5b917d0f1abb848a0a6cba797\" returns successfully" Oct 2 20:12:42.834712 kubelet[2911]: E1002 20:12:42.834663 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:44.714293 kubelet[2911]: E1002 20:12:44.714216 2911 controller.go:193] "Failed to update lease" err="Put \"https://172.31.26.158:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-158?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 20:12:47.835616 kubelet[2911]: E1002 20:12:47.835583 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:52.836259 kubelet[2911]: E1002 20:12:52.836202 2911 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:54.715039 kubelet[2911]: E1002 20:12:54.714987 2911 controller.go:193] "Failed to update lease" err="Put \"https://172.31.26.158:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-158?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"