Oct 2 19:19:01.031684 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:19:01.031714 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:19:01.031729 kernel: BIOS-provided physical RAM map: Oct 2 19:19:01.031740 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:19:01.031749 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 19:19:01.031760 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 19:19:01.031775 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 19:19:01.034878 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 19:19:01.034894 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 19:19:01.034901 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 19:19:01.034908 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 19:19:01.034914 kernel: printk: bootconsole [earlyser0] enabled Oct 2 19:19:01.034920 kernel: NX (Execute Disable) protection: active Oct 2 19:19:01.034926 kernel: efi: EFI v2.70 by Microsoft Oct 2 19:19:01.034940 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 19:19:01.034949 kernel: random: crng init done Oct 2 19:19:01.034956 kernel: SMBIOS 3.1.0 present. Oct 2 19:19:01.034964 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 19:19:01.034971 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 19:19:01.034977 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 19:19:01.034983 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 19:19:01.034992 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 19:19:01.035001 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 19:19:01.035007 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 19:19:01.035017 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 19:19:01.035023 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 19:19:01.035030 kernel: tsc: Detected 2593.905 MHz processor Oct 2 19:19:01.035036 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:19:01.035044 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:19:01.035053 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 19:19:01.035059 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:19:01.035068 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 19:19:01.035077 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 19:19:01.035086 kernel: Using GB pages for direct mapping Oct 2 19:19:01.035094 kernel: Secure boot disabled Oct 2 19:19:01.035102 kernel: ACPI: Early table checksum verification disabled Oct 2 19:19:01.035110 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 19:19:01.035117 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035126 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035133 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 19:19:01.035149 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 19:19:01.035157 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035167 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035177 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035187 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035199 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035213 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035220 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:19:01.035230 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 19:19:01.035237 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 19:19:01.035248 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 19:19:01.035255 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 19:19:01.035264 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 19:19:01.035271 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 19:19:01.035281 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 19:19:01.035290 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 19:19:01.035298 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 19:19:01.035306 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 19:19:01.035313 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:19:01.035322 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:19:01.035330 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 19:19:01.035340 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 19:19:01.035347 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 19:19:01.035356 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 19:19:01.035366 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 19:19:01.035373 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 19:19:01.035383 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 19:19:01.035390 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 19:19:01.035397 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 19:19:01.035407 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 19:19:01.035415 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 19:19:01.035424 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 19:19:01.035433 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 19:19:01.035442 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 19:19:01.035449 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 19:19:01.035457 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 19:19:01.035466 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 19:19:01.035473 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 19:19:01.035482 kernel: Zone ranges: Oct 2 19:19:01.035491 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:19:01.035500 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:19:01.035510 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:19:01.035516 kernel: Movable zone start for each node Oct 2 19:19:01.035526 kernel: Early memory node ranges Oct 2 19:19:01.035533 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:19:01.035543 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 19:19:01.035550 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 19:19:01.035556 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:19:01.035566 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 19:19:01.035573 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:19:01.035584 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:19:01.035591 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 19:19:01.035599 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 19:19:01.035608 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 19:19:01.035615 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:19:01.035624 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:19:01.035631 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:19:01.035639 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 19:19:01.035648 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:19:01.035659 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 19:19:01.035666 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 19:19:01.035673 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:19:01.035682 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:19:01.035690 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:19:01.035699 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:19:01.035706 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:19:01.035713 kernel: Hyper-V: PV spinlocks enabled Oct 2 19:19:01.035722 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:19:01.035734 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 19:19:01.035743 kernel: Policy zone: Normal Oct 2 19:19:01.035751 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:19:01.035762 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:19:01.035770 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 19:19:01.035779 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:19:01.035799 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:19:01.035807 kernel: Memory: 8081204K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 305996K reserved, 0K cma-reserved) Oct 2 19:19:01.035819 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:19:01.035826 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:19:01.035842 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:19:01.035854 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:19:01.035862 kernel: rcu: RCU event tracing is enabled. Oct 2 19:19:01.035870 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:19:01.035880 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:19:01.035888 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:19:01.035898 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:19:01.035905 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:19:01.035915 kernel: Using NULL legacy PIC Oct 2 19:19:01.035925 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 19:19:01.035936 kernel: Console: colour dummy device 80x25 Oct 2 19:19:01.035945 kernel: printk: console [tty1] enabled Oct 2 19:19:01.035955 kernel: printk: console [ttyS0] enabled Oct 2 19:19:01.035963 kernel: printk: bootconsole [earlyser0] disabled Oct 2 19:19:01.035975 kernel: ACPI: Core revision 20210730 Oct 2 19:19:01.035983 kernel: Failed to register legacy timer interrupt Oct 2 19:19:01.035991 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:19:01.036000 kernel: Hyper-V: Using IPI hypercalls Oct 2 19:19:01.036009 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Oct 2 19:19:01.036018 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:19:01.036025 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:19:01.036036 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:19:01.036043 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:19:01.036053 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:19:01.036063 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:19:01.036073 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:19:01.036081 kernel: RETBleed: Vulnerable Oct 2 19:19:01.036090 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:19:01.036098 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:19:01.036105 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:19:01.036115 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:19:01.036123 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:19:01.036132 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:19:01.036140 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:19:01.036150 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:19:01.036159 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:19:01.036168 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:19:01.036176 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:19:01.036183 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 19:19:01.036193 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 19:19:01.036201 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 19:19:01.036211 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 19:19:01.036218 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:19:01.036225 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:19:01.036235 kernel: LSM: Security Framework initializing Oct 2 19:19:01.036243 kernel: SELinux: Initializing. Oct 2 19:19:01.036255 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:19:01.036262 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:19:01.036270 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:19:01.036280 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:19:01.036288 kernel: signal: max sigframe size: 3632 Oct 2 19:19:01.036298 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:19:01.036305 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:19:01.036314 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:19:01.036323 kernel: x86: Booting SMP configuration: Oct 2 19:19:01.036332 kernel: .... node #0, CPUs: #1 Oct 2 19:19:01.036342 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 19:19:01.036352 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:19:01.036361 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:19:01.036370 kernel: smpboot: Max logical packages: 1 Oct 2 19:19:01.036378 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 19:19:01.036386 kernel: devtmpfs: initialized Oct 2 19:19:01.036396 kernel: x86/mm: Memory block size: 128MB Oct 2 19:19:01.036404 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 19:19:01.036416 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:19:01.036423 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:19:01.036433 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:19:01.036441 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:19:01.036451 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:19:01.036459 kernel: audit: type=2000 audit(1696274340.024:1): state=initialized audit_enabled=0 res=1 Oct 2 19:19:01.036466 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:19:01.036476 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:19:01.036484 kernel: cpuidle: using governor menu Oct 2 19:19:01.036495 kernel: ACPI: bus type PCI registered Oct 2 19:19:01.036502 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:19:01.036513 kernel: dca service started, version 1.12.1 Oct 2 19:19:01.036520 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:19:01.036531 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:19:01.036538 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:19:01.036545 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:19:01.036552 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:19:01.036559 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:19:01.036568 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:19:01.036577 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:19:01.036586 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:19:01.036593 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:19:01.036601 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:19:01.036608 kernel: ACPI: Interpreter enabled Oct 2 19:19:01.036618 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:19:01.036625 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:19:01.036633 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:19:01.036642 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 19:19:01.036652 kernel: iommu: Default domain type: Translated Oct 2 19:19:01.036659 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:19:01.036668 kernel: vgaarb: loaded Oct 2 19:19:01.036677 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:19:01.036684 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:19:01.036691 kernel: PTP clock support registered Oct 2 19:19:01.036701 kernel: Registered efivars operations Oct 2 19:19:01.036709 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:19:01.036719 kernel: PCI: System does not support PCI Oct 2 19:19:01.036728 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 19:19:01.036737 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:19:01.036745 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:19:01.036754 kernel: pnp: PnP ACPI init Oct 2 19:19:01.036763 kernel: pnp: PnP ACPI: found 3 devices Oct 2 19:19:01.036770 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:19:01.036779 kernel: NET: Registered PF_INET protocol family Oct 2 19:19:01.036795 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:19:01.036806 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 19:19:01.036813 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:19:01.036823 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:19:01.036831 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:19:01.036841 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 19:19:01.036848 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:19:01.036857 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:19:01.036866 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:19:01.036875 kernel: NET: Registered PF_XDP protocol family Oct 2 19:19:01.036885 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:19:01.036892 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:19:01.036902 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 19:19:01.036910 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:19:01.036920 kernel: Initialise system trusted keyrings Oct 2 19:19:01.036927 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 19:19:01.036935 kernel: Key type asymmetric registered Oct 2 19:19:01.036944 kernel: Asymmetric key parser 'x509' registered Oct 2 19:19:01.036952 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:19:01.036963 kernel: io scheduler mq-deadline registered Oct 2 19:19:01.036970 kernel: io scheduler kyber registered Oct 2 19:19:01.036980 kernel: io scheduler bfq registered Oct 2 19:19:01.036988 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:19:01.036998 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:19:01.037005 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:19:01.037012 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:19:01.037023 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:19:01.037155 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 19:19:01.037242 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T19:19:00 UTC (1696274340) Oct 2 19:19:01.037317 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 19:19:01.037327 kernel: fail to initialize ptp_kvm Oct 2 19:19:01.037336 kernel: intel_pstate: CPU model not supported Oct 2 19:19:01.037347 kernel: efifb: probing for efifb Oct 2 19:19:01.037354 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 19:19:01.037364 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 19:19:01.037371 kernel: efifb: scrolling: redraw Oct 2 19:19:01.037384 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:19:01.037391 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:19:01.037400 kernel: fb0: EFI VGA frame buffer device Oct 2 19:19:01.037408 kernel: pstore: Registered efi as persistent store backend Oct 2 19:19:01.037417 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:19:01.037426 kernel: Segment Routing with IPv6 Oct 2 19:19:01.037433 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:19:01.037441 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:19:01.037450 kernel: Key type dns_resolver registered Oct 2 19:19:01.037462 kernel: IPI shorthand broadcast: enabled Oct 2 19:19:01.037470 kernel: sched_clock: Marking stable (765516000, 23099500)->(982379600, -193764100) Oct 2 19:19:01.037477 kernel: registered taskstats version 1 Oct 2 19:19:01.037487 kernel: Loading compiled-in X.509 certificates Oct 2 19:19:01.037495 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:19:01.037504 kernel: Key type .fscrypt registered Oct 2 19:19:01.037511 kernel: Key type fscrypt-provisioning registered Oct 2 19:19:01.037520 kernel: pstore: Using crash dump compression: deflate Oct 2 19:19:01.037531 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:19:01.037541 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:19:01.037549 kernel: ima: No architecture policies found Oct 2 19:19:01.037556 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:19:01.037566 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:19:01.037575 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:19:01.037584 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:19:01.037591 kernel: Run /init as init process Oct 2 19:19:01.037600 kernel: with arguments: Oct 2 19:19:01.037608 kernel: /init Oct 2 19:19:01.037620 kernel: with environment: Oct 2 19:19:01.037627 kernel: HOME=/ Oct 2 19:19:01.037634 kernel: TERM=linux Oct 2 19:19:01.037644 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:19:01.037655 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:19:01.037665 systemd[1]: Detected virtualization microsoft. Oct 2 19:19:01.037673 systemd[1]: Detected architecture x86-64. Oct 2 19:19:01.037685 systemd[1]: Running in initrd. Oct 2 19:19:01.037694 systemd[1]: No hostname configured, using default hostname. Oct 2 19:19:01.037703 systemd[1]: Hostname set to . Oct 2 19:19:01.037711 systemd[1]: Initializing machine ID from random generator. Oct 2 19:19:01.037721 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:19:01.037729 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:19:01.037739 systemd[1]: Reached target cryptsetup.target. Oct 2 19:19:01.037747 systemd[1]: Reached target paths.target. Oct 2 19:19:01.037756 systemd[1]: Reached target slices.target. Oct 2 19:19:01.037766 systemd[1]: Reached target swap.target. Oct 2 19:19:01.037777 systemd[1]: Reached target timers.target. Oct 2 19:19:01.037792 systemd[1]: Listening on iscsid.socket. Oct 2 19:19:01.037802 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:19:01.037811 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:19:01.037820 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:19:01.037828 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:19:01.037840 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:19:01.037849 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:19:01.037860 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:19:01.037867 systemd[1]: Reached target sockets.target. Oct 2 19:19:01.037878 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:19:01.037886 systemd[1]: Finished network-cleanup.service. Oct 2 19:19:01.037897 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:19:01.037904 systemd[1]: Starting systemd-journald.service... Oct 2 19:19:01.037914 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:19:01.037924 systemd[1]: Starting systemd-resolved.service... Oct 2 19:19:01.037935 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:19:01.037943 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:19:01.037952 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:19:01.037961 kernel: audit: type=1130 audit(1696274341.034:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.037975 systemd-journald[182]: Journal started Oct 2 19:19:01.038021 systemd-journald[182]: Runtime Journal (/run/log/journal/71813513821f4cc38421aee715abe594) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:19:01.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.020054 systemd-modules-load[183]: Inserted module 'overlay' Oct 2 19:19:01.052802 systemd[1]: Started systemd-journald.service. Oct 2 19:19:01.061341 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:19:01.094069 kernel: audit: type=1130 audit(1696274341.060:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.094090 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:19:01.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.079423 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:19:01.113867 kernel: audit: type=1130 audit(1696274341.066:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.098955 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:19:01.117631 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:19:01.125688 kernel: Bridge firewalling registered Oct 2 19:19:01.124426 systemd-resolved[184]: Positive Trust Anchors: Oct 2 19:19:01.124436 systemd-resolved[184]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:19:01.124488 systemd-resolved[184]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:19:01.127511 systemd-modules-load[183]: Inserted module 'br_netfilter' Oct 2 19:19:01.127718 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:19:01.134731 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:19:01.142402 systemd-resolved[184]: Defaulting to hostname 'linux'. Oct 2 19:19:01.145658 systemd[1]: Started systemd-resolved.service. Oct 2 19:19:01.149649 systemd[1]: Reached target nss-lookup.target. Oct 2 19:19:01.189759 kernel: audit: type=1130 audit(1696274341.123:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.189803 kernel: audit: type=1130 audit(1696274341.133:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.189832 kernel: audit: type=1130 audit(1696274341.149:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.189978 dracut-cmdline[199]: dracut-dracut-053 Oct 2 19:19:01.189978 dracut-cmdline[199]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:19:01.210017 kernel: SCSI subsystem initialized Oct 2 19:19:01.222366 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:19:01.222404 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:19:01.227887 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:19:01.231912 systemd-modules-load[183]: Inserted module 'dm_multipath' Oct 2 19:19:01.234816 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:19:01.254073 kernel: audit: type=1130 audit(1696274341.236:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.238134 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:19:01.256658 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:19:01.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.273804 kernel: audit: type=1130 audit(1696274341.260:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.287804 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:19:01.301808 kernel: iscsi: registered transport (tcp) Oct 2 19:19:01.325314 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:19:01.325353 kernel: QLogic iSCSI HBA Driver Oct 2 19:19:01.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.353384 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:19:01.373256 kernel: audit: type=1130 audit(1696274341.355:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.357031 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:19:01.414803 kernel: raid6: avx512x4 gen() 18420 MB/s Oct 2 19:19:01.434807 kernel: raid6: avx512x4 xor() 8945 MB/s Oct 2 19:19:01.454799 kernel: raid6: avx512x2 gen() 18572 MB/s Oct 2 19:19:01.474803 kernel: raid6: avx512x2 xor() 30011 MB/s Oct 2 19:19:01.494804 kernel: raid6: avx512x1 gen() 18518 MB/s Oct 2 19:19:01.514801 kernel: raid6: avx512x1 xor() 27143 MB/s Oct 2 19:19:01.534799 kernel: raid6: avx2x4 gen() 18424 MB/s Oct 2 19:19:01.554804 kernel: raid6: avx2x4 xor() 7999 MB/s Oct 2 19:19:01.574800 kernel: raid6: avx2x2 gen() 18471 MB/s Oct 2 19:19:01.594802 kernel: raid6: avx2x2 xor() 22192 MB/s Oct 2 19:19:01.615801 kernel: raid6: avx2x1 gen() 13725 MB/s Oct 2 19:19:01.635800 kernel: raid6: avx2x1 xor() 19335 MB/s Oct 2 19:19:01.655801 kernel: raid6: sse2x4 gen() 11720 MB/s Oct 2 19:19:01.675801 kernel: raid6: sse2x4 xor() 7354 MB/s Oct 2 19:19:01.695800 kernel: raid6: sse2x2 gen() 12925 MB/s Oct 2 19:19:01.715799 kernel: raid6: sse2x2 xor() 7656 MB/s Oct 2 19:19:01.735801 kernel: raid6: sse2x1 gen() 11605 MB/s Oct 2 19:19:01.758560 kernel: raid6: sse2x1 xor() 5938 MB/s Oct 2 19:19:01.758578 kernel: raid6: using algorithm avx512x2 gen() 18572 MB/s Oct 2 19:19:01.758601 kernel: raid6: .... xor() 30011 MB/s, rmw enabled Oct 2 19:19:01.761937 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:19:01.780809 kernel: xor: automatically using best checksumming function avx Oct 2 19:19:01.875812 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:19:01.883931 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:19:01.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.887000 audit: BPF prog-id=7 op=LOAD Oct 2 19:19:01.887000 audit: BPF prog-id=8 op=LOAD Oct 2 19:19:01.888497 systemd[1]: Starting systemd-udevd.service... Oct 2 19:19:01.903138 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 19:19:01.907745 systemd[1]: Started systemd-udevd.service. Oct 2 19:19:01.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.912526 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:19:01.928923 dracut-pre-trigger[387]: rd.md=0: removing MD RAID activation Oct 2 19:19:01.959443 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:19:01.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:01.962455 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:19:01.999008 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:19:02.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:02.045809 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:19:02.080586 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:19:02.080636 kernel: AES CTR mode by8 optimization enabled Oct 2 19:19:02.080647 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 19:19:02.095455 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 19:19:02.105828 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 19:19:02.117976 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 19:19:02.124806 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 19:19:02.130804 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:19:02.130834 kernel: scsi host1: storvsc_host_t Oct 2 19:19:02.136374 kernel: scsi host0: storvsc_host_t Oct 2 19:19:02.137101 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 19:19:02.146811 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 19:19:02.157802 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 19:19:02.169051 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 19:19:02.169088 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 19:19:02.180929 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 19:19:02.181165 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:19:02.182799 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 19:19:02.196406 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 19:19:02.196573 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:19:02.196688 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 19:19:02.199706 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 19:19:02.199863 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 19:19:02.209804 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:19:02.215801 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 19:19:02.317813 kernel: hv_netvsc 000d3ab6-9cbe-000d-3ab6-9cbe000d3ab6 eth0: VF slot 1 added Oct 2 19:19:02.336811 kernel: hv_vmbus: registering driver hv_pci Oct 2 19:19:02.342805 kernel: hv_pci c1f4e47b-efec-457a-9eaa-5c4ea0875dd0: PCI VMBus probing: Using version 0x10004 Oct 2 19:19:02.345163 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:19:02.356024 kernel: hv_pci c1f4e47b-efec-457a-9eaa-5c4ea0875dd0: PCI host bridge to bus efec:00 Oct 2 19:19:02.362643 kernel: pci_bus efec:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 19:19:02.362826 kernel: pci_bus efec:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 19:19:02.369805 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (443) Oct 2 19:19:02.369832 kernel: pci efec:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 19:19:02.378836 kernel: pci efec:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:19:02.383857 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:19:02.404863 kernel: pci efec:00:02.0: enabling Extended Tags Oct 2 19:19:02.421805 kernel: pci efec:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at efec:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 19:19:02.432703 kernel: pci_bus efec:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 19:19:02.432861 kernel: pci efec:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:19:02.441545 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:19:02.447903 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:19:02.451369 systemd[1]: Starting disk-uuid.service... Oct 2 19:19:02.464628 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:19:02.481800 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:19:02.492804 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:19:02.575807 kernel: mlx5_core efec:00:02.0: firmware version: 14.30.1224 Oct 2 19:19:02.751814 kernel: mlx5_core efec:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:19:02.888035 kernel: mlx5_core efec:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 19:19:02.888281 kernel: mlx5_core efec:00:02.0: mlx5e_tc_post_act_init:40:(pid 16): firmware level support is missing Oct 2 19:19:02.899936 kernel: hv_netvsc 000d3ab6-9cbe-000d-3ab6-9cbe000d3ab6 eth0: VF registering: eth1 Oct 2 19:19:02.900110 kernel: mlx5_core efec:00:02.0 eth1: joined to eth0 Oct 2 19:19:02.911823 kernel: mlx5_core efec:00:02.0 enP61420s1: renamed from eth1 Oct 2 19:19:03.492171 disk-uuid[544]: The operation has completed successfully. Oct 2 19:19:03.494846 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:19:03.565139 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:19:03.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.565241 systemd[1]: Finished disk-uuid.service. Oct 2 19:19:03.576146 systemd[1]: Starting verity-setup.service... Oct 2 19:19:03.600810 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:19:03.690927 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:19:03.695200 systemd[1]: Finished verity-setup.service. Oct 2 19:19:03.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.699603 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:19:03.777815 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:19:03.777812 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:19:03.779970 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:19:03.780681 systemd[1]: Starting ignition-setup.service... Oct 2 19:19:03.791257 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:19:03.811720 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:19:03.811747 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:19:03.811763 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:19:03.838696 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:19:03.865846 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:19:03.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.869000 audit: BPF prog-id=9 op=LOAD Oct 2 19:19:03.871001 systemd[1]: Starting systemd-networkd.service... Oct 2 19:19:03.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.890835 systemd[1]: Finished ignition-setup.service. Oct 2 19:19:03.895907 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:19:03.904111 systemd-networkd[799]: lo: Link UP Oct 2 19:19:03.905221 systemd-networkd[799]: lo: Gained carrier Oct 2 19:19:03.907705 systemd-networkd[799]: Enumeration completed Oct 2 19:19:03.909634 systemd[1]: Started systemd-networkd.service. Oct 2 19:19:03.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.913490 systemd-networkd[799]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:19:03.914321 systemd[1]: Reached target network.target. Oct 2 19:19:03.920373 systemd[1]: Starting iscsiuio.service... Oct 2 19:19:03.929642 systemd[1]: Started iscsiuio.service. Oct 2 19:19:03.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.934421 systemd[1]: Starting iscsid.service... Oct 2 19:19:03.940354 iscsid[806]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:19:03.940354 iscsid[806]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:19:03.940354 iscsid[806]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:19:03.940354 iscsid[806]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:19:03.940354 iscsid[806]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:19:03.940354 iscsid[806]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:19:03.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:03.940395 systemd[1]: Started iscsid.service. Oct 2 19:19:03.942911 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:19:03.962028 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:19:03.965694 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:19:03.996435 kernel: mlx5_core efec:00:02.0 enP61420s1: Link up Oct 2 19:19:03.970544 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:19:03.976231 systemd[1]: Reached target remote-fs.target. Oct 2 19:19:03.982503 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:19:04.005502 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:19:04.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:04.078747 kernel: hv_netvsc 000d3ab6-9cbe-000d-3ab6-9cbe000d3ab6 eth0: Data path switched to VF: enP61420s1 Oct 2 19:19:04.079003 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:19:04.078339 systemd-networkd[799]: enP61420s1: Link UP Oct 2 19:19:04.078596 systemd-networkd[799]: eth0: Link UP Oct 2 19:19:04.079199 systemd-networkd[799]: eth0: Gained carrier Oct 2 19:19:04.086971 systemd-networkd[799]: enP61420s1: Gained carrier Oct 2 19:19:04.105856 systemd-networkd[799]: eth0: DHCPv4 address 10.200.8.18/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:19:05.339994 systemd-networkd[799]: eth0: Gained IPv6LL Oct 2 19:19:05.539123 ignition[801]: Ignition 2.14.0 Oct 2 19:19:05.539142 ignition[801]: Stage: fetch-offline Oct 2 19:19:05.539227 ignition[801]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:19:05.539300 ignition[801]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:19:05.710687 ignition[801]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:19:05.714063 ignition[801]: parsed url from cmdline: "" Oct 2 19:19:05.714074 ignition[801]: no config URL provided Oct 2 19:19:05.714085 ignition[801]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:19:05.714107 ignition[801]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:19:05.714115 ignition[801]: failed to fetch config: resource requires networking Oct 2 19:19:05.721682 ignition[801]: Ignition finished successfully Oct 2 19:19:05.726653 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:19:05.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.729854 systemd[1]: Starting ignition-fetch.service... Oct 2 19:19:05.755858 kernel: kauditd_printk_skb: 17 callbacks suppressed Oct 2 19:19:05.755889 kernel: audit: type=1130 audit(1696274345.728:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.753713 ignition[825]: Ignition 2.14.0 Oct 2 19:19:05.753720 ignition[825]: Stage: fetch Oct 2 19:19:05.755866 ignition[825]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:19:05.755914 ignition[825]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:19:05.766731 ignition[825]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:19:05.766892 ignition[825]: parsed url from cmdline: "" Oct 2 19:19:05.766896 ignition[825]: no config URL provided Oct 2 19:19:05.766901 ignition[825]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:19:05.766909 ignition[825]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:19:05.769441 ignition[825]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 19:19:05.797139 ignition[825]: GET result: OK Oct 2 19:19:05.797265 ignition[825]: config has been read from IMDS userdata Oct 2 19:19:05.797302 ignition[825]: parsing config with SHA512: 7d3dfbcbbf886802a2ad31b2fa1c23cc2035874127bded04d2ca1b4f762a08afbeaed5cc847f618d327b07a6058bdf157a80f3979bffe72e30bb07fb9043450a Oct 2 19:19:05.819291 unknown[825]: fetched base config from "system" Oct 2 19:19:05.819304 unknown[825]: fetched base config from "system" Oct 2 19:19:05.819311 unknown[825]: fetched user config from "azure" Oct 2 19:19:05.825720 ignition[825]: fetch: fetch complete Oct 2 19:19:05.825729 ignition[825]: fetch: fetch passed Oct 2 19:19:05.825776 ignition[825]: Ignition finished successfully Oct 2 19:19:05.831043 systemd[1]: Finished ignition-fetch.service. Oct 2 19:19:05.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.847942 kernel: audit: type=1130 audit(1696274345.832:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.846771 systemd[1]: Starting ignition-kargs.service... Oct 2 19:19:05.859232 ignition[831]: Ignition 2.14.0 Oct 2 19:19:05.859241 ignition[831]: Stage: kargs Oct 2 19:19:05.859370 ignition[831]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:19:05.859402 ignition[831]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:19:05.869833 ignition[831]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:19:05.870985 ignition[831]: kargs: kargs passed Oct 2 19:19:05.871021 ignition[831]: Ignition finished successfully Oct 2 19:19:05.875642 systemd[1]: Finished ignition-kargs.service. Oct 2 19:19:05.877434 systemd[1]: Starting ignition-disks.service... Oct 2 19:19:05.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.898555 ignition[837]: Ignition 2.14.0 Oct 2 19:19:05.900729 kernel: audit: type=1130 audit(1696274345.876:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.898564 ignition[837]: Stage: disks Oct 2 19:19:05.898677 ignition[837]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:19:05.898702 ignition[837]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:19:05.901505 ignition[837]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:19:05.907467 ignition[837]: disks: disks passed Oct 2 19:19:05.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.909607 systemd[1]: Finished ignition-disks.service. Oct 2 19:19:05.928057 kernel: audit: type=1130 audit(1696274345.911:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.907506 ignition[837]: Ignition finished successfully Oct 2 19:19:05.911987 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:19:05.928064 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:19:05.932124 systemd[1]: Reached target local-fs.target. Oct 2 19:19:05.939681 systemd[1]: Reached target sysinit.target. Oct 2 19:19:05.943440 systemd[1]: Reached target basic.target. Oct 2 19:19:05.946131 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:19:06.020617 systemd-fsck[845]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 19:19:06.026839 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:19:06.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:06.031946 systemd[1]: Mounting sysroot.mount... Oct 2 19:19:06.047484 kernel: audit: type=1130 audit(1696274346.030:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:06.058802 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:19:06.059535 systemd[1]: Mounted sysroot.mount. Oct 2 19:19:06.063404 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:19:06.125524 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:19:06.130868 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:19:06.135427 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:19:06.135463 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:19:06.145410 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:19:06.204994 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:19:06.209617 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:19:06.227818 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (855) Oct 2 19:19:06.227850 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:19:06.235940 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:19:06.235974 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:19:06.243869 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:19:06.248177 initrd-setup-root[860]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:19:06.283090 initrd-setup-root[886]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:19:06.316213 initrd-setup-root[894]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:19:06.322153 initrd-setup-root[902]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:19:07.121609 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:19:07.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:07.127547 systemd[1]: Starting ignition-mount.service... Oct 2 19:19:07.147127 kernel: audit: type=1130 audit(1696274347.125:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:07.141527 systemd[1]: Starting sysroot-boot.service... Oct 2 19:19:07.144231 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:19:07.144347 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:19:07.171848 ignition[922]: INFO : Ignition 2.14.0 Oct 2 19:19:07.171848 ignition[922]: INFO : Stage: mount Oct 2 19:19:07.171848 ignition[922]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:19:07.171848 ignition[922]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:19:07.170505 systemd[1]: Finished sysroot-boot.service. Oct 2 19:19:07.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:07.190873 ignition[922]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:19:07.203368 kernel: audit: type=1130 audit(1696274347.185:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:07.203400 ignition[922]: INFO : mount: mount passed Oct 2 19:19:07.203400 ignition[922]: INFO : Ignition finished successfully Oct 2 19:19:07.218899 kernel: audit: type=1130 audit(1696274347.202:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:07.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:07.193362 systemd[1]: Finished ignition-mount.service. Oct 2 19:19:08.942275 coreos-metadata[854]: Oct 02 19:19:08.942 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 19:19:08.974237 coreos-metadata[854]: Oct 02 19:19:08.974 INFO Fetch successful Oct 2 19:19:09.009976 coreos-metadata[854]: Oct 02 19:19:09.009 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 19:19:09.023899 coreos-metadata[854]: Oct 02 19:19:09.023 INFO Fetch successful Oct 2 19:19:09.058967 coreos-metadata[854]: Oct 02 19:19:09.058 INFO wrote hostname ci-3510.3.0-a-2ed8b7e9a3 to /sysroot/etc/hostname Oct 2 19:19:09.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:09.061019 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:19:09.080632 kernel: audit: type=1130 audit(1696274349.064:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:09.066569 systemd[1]: Starting ignition-files.service... Oct 2 19:19:09.086930 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:19:09.098881 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (934) Oct 2 19:19:09.109184 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:19:09.109216 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:19:09.109228 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:19:09.117364 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:19:09.130293 ignition[953]: INFO : Ignition 2.14.0 Oct 2 19:19:09.130293 ignition[953]: INFO : Stage: files Oct 2 19:19:09.133861 ignition[953]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:19:09.133861 ignition[953]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:19:09.147048 ignition[953]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:19:09.182143 ignition[953]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:19:09.185394 ignition[953]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:19:09.185394 ignition[953]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:19:09.264499 ignition[953]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:19:09.268490 ignition[953]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:19:09.324308 unknown[953]: wrote ssh authorized keys file for user: core Oct 2 19:19:09.327292 ignition[953]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:19:09.330850 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:19:09.335612 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:19:09.589265 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:19:09.793618 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:19:09.802109 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:19:09.802109 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:19:09.802109 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:19:10.093739 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:19:10.178292 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:19:10.185940 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:19:10.185940 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:19:10.185940 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:19:10.365422 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:19:12.364408 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Oct 2 19:19:12.372567 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:19:12.372567 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:19:12.372567 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:19:12.516034 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:19:15.451624 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Oct 2 19:19:15.462570 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:19:15.462570 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:19:15.462570 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:19:15.594608 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:19:17.584241 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Oct 2 19:19:17.593412 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:19:17.593412 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:19:17.593412 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:19:17.593412 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:19:17.593412 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:19:17.593412 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:19:17.593412 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:19:17.635810 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (953) Oct 2 19:19:17.624967 systemd[1]: mnt-oem160881967.mount: Deactivated successfully. Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem160881967" Oct 2 19:19:17.638546 ignition[953]: CRITICAL : files: createFilesystemsFiles: createFiles: op(b): op(c): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem160881967": device or resource busy Oct 2 19:19:17.638546 ignition[953]: ERROR : files: createFilesystemsFiles: createFiles: op(b): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem160881967", trying btrfs: device or resource busy Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem160881967" Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(d): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem160881967" Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(e): [started] unmounting "/mnt/oem160881967" Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(e): [finished] unmounting "/mnt/oem160881967" Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:19:17.638546 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3203542532" Oct 2 19:19:17.638546 ignition[953]: CRITICAL : files: createFilesystemsFiles: createFiles: op(f): op(10): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3203542532": device or resource busy Oct 2 19:19:17.693720 kernel: audit: type=1130 audit(1696274357.650:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.693817 ignition[953]: ERROR : files: createFilesystemsFiles: createFiles: op(f): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3203542532", trying btrfs: device or resource busy Oct 2 19:19:17.693817 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3203542532" Oct 2 19:19:17.693817 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): op(11): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3203542532" Oct 2 19:19:17.693817 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): op(12): [started] unmounting "/mnt/oem3203542532" Oct 2 19:19:17.693817 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): op(12): [finished] unmounting "/mnt/oem3203542532" Oct 2 19:19:17.693817 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(13): [started] processing unit "waagent.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(13): [finished] processing unit "waagent.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(14): [started] processing unit "nvidia.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(14): [finished] processing unit "nvidia.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(15): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(15): op(16): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(15): op(16): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(15): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(17): [started] processing unit "prepare-critools.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(17): op(18): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(17): op(18): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:19:17.693817 ignition[953]: INFO : files: op(17): [finished] processing unit "prepare-critools.service" Oct 2 19:19:17.855447 kernel: audit: type=1130 audit(1696274357.694:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.855487 kernel: audit: type=1131 audit(1696274357.694:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.855509 kernel: audit: type=1130 audit(1696274357.806:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.855529 kernel: audit: type=1130 audit(1696274357.842:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.639625 systemd[1]: mnt-oem3203542532.mount: Deactivated successfully. Oct 2 19:19:17.870554 kernel: audit: type=1131 audit(1696274357.842:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(1b): [started] setting preset to enabled for "waagent.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(1b): [finished] setting preset to enabled for "waagent.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(1c): [started] setting preset to enabled for "nvidia.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: op(1c): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:19:17.870720 ignition[953]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:19:17.870720 ignition[953]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:19:17.870720 ignition[953]: INFO : files: files passed Oct 2 19:19:17.870720 ignition[953]: INFO : Ignition finished successfully Oct 2 19:19:17.955545 kernel: audit: type=1130 audit(1696274357.898:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.955579 kernel: audit: type=1130 audit(1696274357.930:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.955592 kernel: audit: type=1131 audit(1696274357.941:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.647538 systemd[1]: Finished ignition-files.service. Oct 2 19:19:17.955992 initrd-setup-root-after-ignition[978]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:19:17.667885 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:19:17.670675 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:19:17.676305 systemd[1]: Starting ignition-quench.service... Oct 2 19:19:17.688065 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:19:17.688155 systemd[1]: Finished ignition-quench.service. Oct 2 19:19:17.802756 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:19:17.807103 systemd[1]: Reached target ignition-complete.target. Oct 2 19:19:17.825027 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:19:17.839848 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:19:17.839941 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:19:17.843008 systemd[1]: Reached target initrd-fs.target. Oct 2 19:19:17.870547 systemd[1]: Reached target initrd.target. Oct 2 19:19:17.880406 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:19:17.881326 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:19:17.895320 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:19:17.916889 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:19:17.926073 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:19:17.926159 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:19:17.942769 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:19:18.004607 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:19:18.008940 systemd[1]: Stopped target timers.target. Oct 2 19:19:18.012568 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:19:18.014844 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:19:18.065713 kernel: audit: type=1131 audit(1696274358.014:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.015837 systemd[1]: Stopped target initrd.target. Oct 2 19:19:18.016205 systemd[1]: Stopped target basic.target. Oct 2 19:19:18.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.016614 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:19:18.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.091644 ignition[991]: INFO : Ignition 2.14.0 Oct 2 19:19:18.091644 ignition[991]: INFO : Stage: umount Oct 2 19:19:18.091644 ignition[991]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:19:18.091644 ignition[991]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:19:18.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.017027 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:19:18.119606 ignition[991]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:19:18.119606 ignition[991]: INFO : umount: umount passed Oct 2 19:19:18.119606 ignition[991]: INFO : Ignition finished successfully Oct 2 19:19:18.017427 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:19:18.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.017947 systemd[1]: Stopped target remote-fs.target. Oct 2 19:19:18.018361 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:19:18.018409 systemd[1]: Stopped target sysinit.target. Oct 2 19:19:18.018887 systemd[1]: Stopped target local-fs.target. Oct 2 19:19:18.019292 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:19:18.019713 systemd[1]: Stopped target swap.target. Oct 2 19:19:18.020140 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:19:18.020184 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:19:18.020583 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:19:18.034542 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:19:18.034585 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:19:18.035178 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:19:18.035211 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:19:18.035537 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:19:18.035570 systemd[1]: Stopped ignition-files.service. Oct 2 19:19:18.035981 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:19:18.036012 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:19:18.062028 systemd[1]: Stopping ignition-mount.service... Oct 2 19:19:18.066826 systemd[1]: Stopping iscsiuio.service... Oct 2 19:19:18.069593 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:19:18.069677 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:19:18.072881 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:19:18.076182 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:19:18.076245 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:19:18.085359 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:19:18.085409 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:19:18.091775 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:19:18.093545 systemd[1]: Stopped iscsiuio.service. Oct 2 19:19:18.119643 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:19:18.124503 systemd[1]: Stopped ignition-mount.service. Oct 2 19:19:18.132832 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:19:18.132889 systemd[1]: Stopped ignition-disks.service. Oct 2 19:19:18.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.196859 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:19:18.196925 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:19:18.201267 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:19:18.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.201319 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:19:18.205011 systemd[1]: Stopped target network.target. Oct 2 19:19:18.209181 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:19:18.209235 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:19:18.211471 systemd[1]: Stopped target paths.target. Oct 2 19:19:18.215140 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:19:18.221725 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:19:18.230369 systemd[1]: Stopped target slices.target. Oct 2 19:19:18.234148 systemd[1]: Stopped target sockets.target. Oct 2 19:19:18.238266 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:19:18.238312 systemd[1]: Closed iscsid.socket. Oct 2 19:19:18.243616 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:19:18.243666 systemd[1]: Closed iscsiuio.socket. Oct 2 19:19:18.249100 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:19:18.251384 systemd[1]: Stopped ignition-setup.service. Oct 2 19:19:18.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.255260 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:19:18.259050 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:19:18.264323 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:19:18.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.265002 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:19:18.265095 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:19:18.272101 systemd-networkd[799]: eth0: DHCPv6 lease lost Oct 2 19:19:18.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.273415 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:19:18.273812 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:19:18.280953 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:19:18.285117 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:19:18.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.287407 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:19:18.287438 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:19:18.291499 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:19:18.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.299000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:19:18.299000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:19:18.291540 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:19:18.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.297098 systemd[1]: Stopping network-cleanup.service... Oct 2 19:19:18.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.299525 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:19:18.299583 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:19:18.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.304294 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:19:18.304346 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:19:18.308492 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:19:18.308541 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:19:18.312751 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:19:18.317447 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:19:18.317570 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:19:18.324405 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:19:18.324449 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:19:18.341704 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:19:18.341752 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:19:18.348017 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:19:18.348074 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:19:18.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.354351 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:19:18.354400 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:19:18.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.360187 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:19:18.360240 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:19:18.365608 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:19:18.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.368947 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:19:18.369007 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:19:18.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.374319 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:19:18.374410 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:19:18.416816 kernel: hv_netvsc 000d3ab6-9cbe-000d-3ab6-9cbe000d3ab6 eth0: Data path switched from VF: enP61420s1 Oct 2 19:19:18.432899 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:19:18.433127 systemd[1]: Stopped network-cleanup.service. Oct 2 19:19:18.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.439433 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:19:18.444653 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:19:18.455397 systemd[1]: Switching root. Oct 2 19:19:18.480689 iscsid[806]: iscsid shutting down. Oct 2 19:19:18.482686 systemd-journald[182]: Received SIGTERM from PID 1 (systemd). Oct 2 19:19:18.482750 systemd-journald[182]: Journal stopped Oct 2 19:19:40.683761 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:19:40.683811 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:19:40.683825 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:19:40.683836 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:19:40.683844 kernel: SELinux: policy capability open_perms=1 Oct 2 19:19:40.683852 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:19:40.683861 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:19:40.683874 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:19:40.683882 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:19:40.683893 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:19:40.683901 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:19:40.683911 systemd[1]: Successfully loaded SELinux policy in 564.150ms. Oct 2 19:19:40.683923 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 42.931ms. Oct 2 19:19:40.683935 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:19:40.683950 systemd[1]: Detected virtualization microsoft. Oct 2 19:19:40.683960 systemd[1]: Detected architecture x86-64. Oct 2 19:19:40.683971 systemd[1]: Detected first boot. Oct 2 19:19:40.683981 systemd[1]: Hostname set to . Oct 2 19:19:40.683992 systemd[1]: Initializing machine ID from random generator. Oct 2 19:19:40.684006 kernel: kauditd_printk_skb: 33 callbacks suppressed Oct 2 19:19:40.684016 kernel: audit: type=1400 audit(1696274363.638:80): avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:19:40.684027 kernel: audit: type=1400 audit(1696274363.668:81): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:19:40.684040 kernel: audit: type=1400 audit(1696274363.668:82): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:19:40.684049 kernel: audit: type=1334 audit(1696274363.681:83): prog-id=10 op=LOAD Oct 2 19:19:40.684057 kernel: audit: type=1334 audit(1696274363.681:84): prog-id=10 op=UNLOAD Oct 2 19:19:40.684070 kernel: audit: type=1334 audit(1696274363.694:85): prog-id=11 op=LOAD Oct 2 19:19:40.684081 kernel: audit: type=1334 audit(1696274363.694:86): prog-id=11 op=UNLOAD Oct 2 19:19:40.684090 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:19:40.684101 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:19:40.684111 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:19:40.684125 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:19:40.684133 kernel: audit: type=1334 audit(1696274380.220:87): prog-id=12 op=LOAD Oct 2 19:19:40.684144 kernel: audit: type=1334 audit(1696274380.220:88): prog-id=3 op=UNLOAD Oct 2 19:19:40.684156 kernel: audit: type=1334 audit(1696274380.225:89): prog-id=13 op=LOAD Oct 2 19:19:40.684166 kernel: audit: type=1334 audit(1696274380.230:90): prog-id=14 op=LOAD Oct 2 19:19:40.684174 kernel: audit: type=1334 audit(1696274380.230:91): prog-id=4 op=UNLOAD Oct 2 19:19:40.684183 kernel: audit: type=1334 audit(1696274380.230:92): prog-id=5 op=UNLOAD Oct 2 19:19:40.684193 kernel: audit: type=1334 audit(1696274380.235:93): prog-id=15 op=LOAD Oct 2 19:19:40.684202 kernel: audit: type=1334 audit(1696274380.235:94): prog-id=12 op=UNLOAD Oct 2 19:19:40.684214 kernel: audit: type=1334 audit(1696274380.249:95): prog-id=16 op=LOAD Oct 2 19:19:40.684225 kernel: audit: type=1334 audit(1696274380.258:96): prog-id=17 op=LOAD Oct 2 19:19:40.684236 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:19:40.684248 systemd[1]: Stopped iscsid.service. Oct 2 19:19:40.684262 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:19:40.684271 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:19:40.684283 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:19:40.684293 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:19:40.684306 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:19:40.684315 systemd[1]: Created slice system-getty.slice. Oct 2 19:19:40.684329 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:19:40.684341 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:19:40.684351 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:19:40.684362 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:19:40.684373 systemd[1]: Created slice user.slice. Oct 2 19:19:40.684385 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:19:40.684395 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:19:40.684407 systemd[1]: Set up automount boot.automount. Oct 2 19:19:40.684416 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:19:40.684431 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:19:40.684441 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:19:40.684453 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:19:40.684462 systemd[1]: Reached target integritysetup.target. Oct 2 19:19:40.684474 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:19:40.684484 systemd[1]: Reached target remote-fs.target. Oct 2 19:19:40.684497 systemd[1]: Reached target slices.target. Oct 2 19:19:40.684510 systemd[1]: Reached target swap.target. Oct 2 19:19:40.684522 systemd[1]: Reached target torcx.target. Oct 2 19:19:40.684531 systemd[1]: Reached target veritysetup.target. Oct 2 19:19:40.684543 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:19:40.684556 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:19:40.684568 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:19:40.684580 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:19:40.684590 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:19:40.684602 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:19:40.684612 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:19:40.684624 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:19:40.684636 systemd[1]: Mounting media.mount... Oct 2 19:19:40.684646 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:19:40.684655 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:19:40.684670 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:19:40.684682 systemd[1]: Mounting tmp.mount... Oct 2 19:19:40.684692 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:19:40.684702 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:19:40.684714 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:19:40.684725 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:19:40.684737 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:19:40.684747 systemd[1]: Starting modprobe@drm.service... Oct 2 19:19:40.684759 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:19:40.684771 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:19:40.684783 systemd[1]: Starting modprobe@loop.service... Oct 2 19:19:40.684804 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:19:40.684816 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:19:40.684827 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:19:40.684837 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:19:40.684849 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:19:40.684861 systemd[1]: Stopped systemd-journald.service. Oct 2 19:19:40.684871 kernel: loop: module loaded Oct 2 19:19:40.684886 systemd[1]: Starting systemd-journald.service... Oct 2 19:19:40.684897 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:19:40.684908 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:19:40.684920 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:19:40.684929 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:19:40.684940 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:19:40.684951 systemd[1]: Stopped verity-setup.service. Oct 2 19:19:40.684963 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:19:40.684976 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:19:40.684989 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:19:40.685002 systemd-journald[1134]: Journal started Oct 2 19:19:40.685044 systemd-journald[1134]: Runtime Journal (/run/log/journal/53dc4370c526424297a963405effce6d) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:19:22.334000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:19:23.638000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:19:23.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:19:23.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:19:23.681000 audit: BPF prog-id=10 op=LOAD Oct 2 19:19:23.681000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:19:23.694000 audit: BPF prog-id=11 op=LOAD Oct 2 19:19:23.694000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:19:40.220000 audit: BPF prog-id=12 op=LOAD Oct 2 19:19:40.220000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:19:40.225000 audit: BPF prog-id=13 op=LOAD Oct 2 19:19:40.230000 audit: BPF prog-id=14 op=LOAD Oct 2 19:19:40.230000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:19:40.230000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:19:40.235000 audit: BPF prog-id=15 op=LOAD Oct 2 19:19:40.235000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:19:40.249000 audit: BPF prog-id=16 op=LOAD Oct 2 19:19:40.258000 audit: BPF prog-id=17 op=LOAD Oct 2 19:19:40.258000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:19:40.258000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:19:40.267000 audit: BPF prog-id=18 op=LOAD Oct 2 19:19:40.267000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:19:40.267000 audit: BPF prog-id=19 op=LOAD Oct 2 19:19:40.267000 audit: BPF prog-id=20 op=LOAD Oct 2 19:19:40.267000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:19:40.267000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:19:40.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.283000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:19:40.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.613000 audit: BPF prog-id=21 op=LOAD Oct 2 19:19:40.614000 audit: BPF prog-id=22 op=LOAD Oct 2 19:19:40.614000 audit: BPF prog-id=23 op=LOAD Oct 2 19:19:40.614000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:19:40.614000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:19:40.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.680000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:19:40.680000 audit[1134]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffe6eab1610 a2=4000 a3=7ffe6eab16ac items=0 ppid=1 pid=1134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:40.680000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:19:26.104014 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:19:40.219640 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:19:26.104497 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:19:40.268430 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:19:26.104519 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:19:26.104557 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:19:26.104568 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:19:26.104616 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:19:26.104632 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:19:26.104902 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:19:26.104942 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:19:26.104954 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:19:26.105376 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:19:26.105408 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:19:26.105426 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:19:26.105439 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:19:26.105455 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:19:26.105468 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:19:38.378565 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:38Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:19:38.378928 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:38Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:19:38.379379 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:38Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:19:38.380050 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:38Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:19:38.380132 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:38Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:19:38.380212 /usr/lib/systemd/system-generators/torcx-generator[1024]: time="2023-10-02T19:19:38Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:19:40.700001 systemd[1]: Started systemd-journald.service. Oct 2 19:19:40.700040 kernel: fuse: init (API version 7.34) Oct 2 19:19:40.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.694983 systemd[1]: Mounted media.mount. Oct 2 19:19:40.697000 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:19:40.701078 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:19:40.703137 systemd[1]: Mounted tmp.mount. Oct 2 19:19:40.704936 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:19:40.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.707228 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:19:40.709717 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:19:40.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.709945 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:19:40.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.712689 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:19:40.713094 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:19:40.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.716016 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:19:40.716301 systemd[1]: Finished modprobe@drm.service. Oct 2 19:19:40.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.719062 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:19:40.719354 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:19:40.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.722539 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:19:40.722914 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:19:40.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.725890 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:19:40.726157 systemd[1]: Finished modprobe@loop.service. Oct 2 19:19:40.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.728931 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:19:40.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.731972 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:19:40.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.735160 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:19:40.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.738347 systemd[1]: Reached target network-pre.target. Oct 2 19:19:40.742414 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:19:40.746276 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:19:40.748498 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:19:40.790805 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:19:40.794440 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:19:40.796883 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:19:40.797886 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:19:40.800036 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:19:40.800991 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:19:40.804009 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:19:40.808047 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:19:40.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.810638 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:19:40.813011 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:19:40.816305 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:19:40.826653 udevadm[1148]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:19:40.878459 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:19:40.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.881073 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:19:40.905730 systemd-journald[1134]: Time spent on flushing to /var/log/journal/53dc4370c526424297a963405effce6d is 15.218ms for 1175 entries. Oct 2 19:19:40.905730 systemd-journald[1134]: System Journal (/var/log/journal/53dc4370c526424297a963405effce6d) is 8.0M, max 2.6G, 2.6G free. Oct 2 19:19:41.011686 systemd-journald[1134]: Received client request to flush runtime journal. Oct 2 19:19:40.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.923712 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:19:41.012737 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:19:41.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:41.739811 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:19:41.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:42.972353 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:19:42.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:42.974000 audit: BPF prog-id=24 op=LOAD Oct 2 19:19:42.974000 audit: BPF prog-id=25 op=LOAD Oct 2 19:19:42.974000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:19:42.974000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:19:42.976375 systemd[1]: Starting systemd-udevd.service... Oct 2 19:19:42.994096 systemd-udevd[1151]: Using default interface naming scheme 'v252'. Oct 2 19:19:43.424640 systemd[1]: Started systemd-udevd.service. Oct 2 19:19:43.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:43.428000 audit: BPF prog-id=26 op=LOAD Oct 2 19:19:43.430192 systemd[1]: Starting systemd-networkd.service... Oct 2 19:19:43.463190 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:19:43.539000 audit[1161]: AVC avc: denied { confidentiality } for pid=1161 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:19:43.547818 kernel: hv_vmbus: registering driver hv_balloon Oct 2 19:19:43.547937 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 19:19:43.539000 audit[1161]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55a58298f060 a1=f884 a2=7f182704dbc5 a3=5 items=10 ppid=1151 pid=1161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:43.539000 audit: CWD cwd="/" Oct 2 19:19:43.539000 audit: PATH item=0 name=(null) inode=15923 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=1 name=(null) inode=15924 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=2 name=(null) inode=15923 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=3 name=(null) inode=15925 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=4 name=(null) inode=15923 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=5 name=(null) inode=15926 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=6 name=(null) inode=15923 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=7 name=(null) inode=15927 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=8 name=(null) inode=15923 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PATH item=9 name=(null) inode=15928 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:19:43.539000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:19:43.555825 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:19:43.602913 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 19:19:43.602983 kernel: hv_vmbus: registering driver hv_utils Oct 2 19:19:43.610865 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 19:19:43.610931 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 19:19:43.615930 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 19:19:43.768000 audit: BPF prog-id=27 op=LOAD Oct 2 19:19:43.768000 audit: BPF prog-id=28 op=LOAD Oct 2 19:19:43.768000 audit: BPF prog-id=29 op=LOAD Oct 2 19:19:43.769810 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:19:43.779674 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 19:19:43.790224 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 19:19:43.790287 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 19:19:43.795441 kernel: Console: switching to colour dummy device 80x25 Oct 2 19:19:43.797682 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:19:43.836210 systemd[1]: Started systemd-userdbd.service. Oct 2 19:19:43.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:44.044692 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1165) Oct 2 19:19:44.089752 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:19:44.103691 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 19:19:44.207003 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:19:44.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:44.211231 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:19:45.396465 systemd-networkd[1162]: lo: Link UP Oct 2 19:19:45.396477 systemd-networkd[1162]: lo: Gained carrier Oct 2 19:19:45.397090 systemd-networkd[1162]: Enumeration completed Oct 2 19:19:45.397269 systemd[1]: Started systemd-networkd.service. Oct 2 19:19:45.402692 kernel: kauditd_printk_skb: 75 callbacks suppressed Oct 2 19:19:45.402762 kernel: audit: type=1130 audit(1696274385.398:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.400755 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:19:45.411901 systemd-networkd[1162]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:19:45.449675 kernel: mlx5_core efec:00:02.0 enP61420s1: Link up Oct 2 19:19:45.486675 kernel: hv_netvsc 000d3ab6-9cbe-000d-3ab6-9cbe000d3ab6 eth0: Data path switched to VF: enP61420s1 Oct 2 19:19:45.487955 systemd-networkd[1162]: enP61420s1: Link UP Oct 2 19:19:45.488088 systemd-networkd[1162]: eth0: Link UP Oct 2 19:19:45.488093 systemd-networkd[1162]: eth0: Gained carrier Oct 2 19:19:45.492915 systemd-networkd[1162]: enP61420s1: Gained carrier Oct 2 19:19:45.511354 lvm[1227]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:19:45.521785 systemd-networkd[1162]: eth0: DHCPv4 address 10.200.8.18/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:19:45.533583 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:19:45.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.536312 systemd[1]: Reached target cryptsetup.target. Oct 2 19:19:45.547677 kernel: audit: type=1130 audit(1696274385.535:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.551020 systemd[1]: Starting lvm2-activation.service... Oct 2 19:19:45.555487 lvm[1229]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:19:45.579671 systemd[1]: Finished lvm2-activation.service. Oct 2 19:19:45.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.581993 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:19:45.594695 kernel: audit: type=1130 audit(1696274385.581:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.594729 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:19:45.594780 systemd[1]: Reached target local-fs.target. Oct 2 19:19:45.597100 systemd[1]: Reached target machines.target. Oct 2 19:19:45.600282 systemd[1]: Starting ldconfig.service... Oct 2 19:19:45.606226 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:19:45.606310 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:19:45.607368 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:19:45.610778 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:19:45.614698 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:19:45.617203 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:19:45.617308 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:19:45.618685 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:19:45.630518 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1231 (bootctl) Oct 2 19:19:45.631872 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:19:45.643594 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:19:45.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.658682 kernel: audit: type=1130 audit(1696274385.643:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.737930 systemd-tmpfiles[1234]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:19:46.149560 systemd-tmpfiles[1234]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:19:46.174181 systemd-tmpfiles[1234]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:19:46.178222 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:19:46.178812 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:19:46.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:46.193683 kernel: audit: type=1130 audit(1696274386.180:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:46.812502 systemd-fsck[1239]: fsck.fat 4.2 (2021-01-31) Oct 2 19:19:46.812502 systemd-fsck[1239]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:19:46.814997 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:19:46.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:46.819600 systemd[1]: Mounting boot.mount... Oct 2 19:19:46.830682 kernel: audit: type=1130 audit(1696274386.817:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:46.838075 systemd[1]: Mounted boot.mount. Oct 2 19:19:46.852433 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:19:46.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:46.866701 kernel: audit: type=1130 audit(1696274386.851:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.029872 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:19:47.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.033831 systemd[1]: Starting audit-rules.service... Oct 2 19:19:47.046824 kernel: audit: type=1130 audit(1696274387.031:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.049908 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:19:47.053348 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:19:47.064811 kernel: audit: type=1334 audit(1696274387.056:165): prog-id=30 op=LOAD Oct 2 19:19:47.056000 audit: BPF prog-id=30 op=LOAD Oct 2 19:19:47.062214 systemd[1]: Starting systemd-resolved.service... Oct 2 19:19:47.064000 audit: BPF prog-id=31 op=LOAD Oct 2 19:19:47.065936 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:19:47.074967 kernel: audit: type=1334 audit(1696274387.064:166): prog-id=31 op=LOAD Oct 2 19:19:47.074131 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:19:47.083090 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:19:47.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.085897 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:19:47.103000 audit[1251]: SYSTEM_BOOT pid=1251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.107692 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:19:47.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.153756 systemd-networkd[1162]: eth0: Gained IPv6LL Oct 2 19:19:47.155478 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:19:47.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.166656 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:19:47.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.244889 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:19:47.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:47.248009 systemd[1]: Reached target time-set.target. Oct 2 19:19:47.352704 systemd-resolved[1248]: Positive Trust Anchors: Oct 2 19:19:47.353088 systemd-resolved[1248]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:19:47.353150 systemd-resolved[1248]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:19:47.458000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:19:47.458000 audit[1267]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd1b7063d0 a2=420 a3=0 items=0 ppid=1245 pid=1267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:47.458000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:19:47.459752 augenrules[1267]: No rules Oct 2 19:19:47.460188 systemd[1]: Finished audit-rules.service. Oct 2 19:19:47.569880 systemd-resolved[1248]: Using system hostname 'ci-3510.3.0-a-2ed8b7e9a3'. Oct 2 19:19:47.571601 systemd[1]: Started systemd-resolved.service. Oct 2 19:19:47.574317 systemd[1]: Reached target network.target. Oct 2 19:19:47.576642 systemd[1]: Reached target network-online.target. Oct 2 19:19:47.579176 systemd[1]: Reached target nss-lookup.target. Oct 2 19:19:47.584018 systemd-timesyncd[1249]: Contacted time server 188.125.64.6:123 (0.flatcar.pool.ntp.org). Oct 2 19:19:47.584084 systemd-timesyncd[1249]: Initial clock synchronization to Mon 2023-10-02 19:19:47.585167 UTC. Oct 2 19:19:57.529347 ldconfig[1230]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:19:57.539247 systemd[1]: Finished ldconfig.service. Oct 2 19:19:57.543673 systemd[1]: Starting systemd-update-done.service... Oct 2 19:19:57.580871 systemd[1]: Finished systemd-update-done.service. Oct 2 19:19:57.583863 systemd[1]: Reached target sysinit.target. Oct 2 19:19:57.585982 systemd[1]: Started motdgen.path. Oct 2 19:19:57.587708 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:19:57.590651 systemd[1]: Started logrotate.timer. Oct 2 19:19:57.592493 systemd[1]: Started mdadm.timer. Oct 2 19:19:57.594272 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:19:57.596351 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:19:57.596396 systemd[1]: Reached target paths.target. Oct 2 19:19:57.598443 systemd[1]: Reached target timers.target. Oct 2 19:19:57.600731 systemd[1]: Listening on dbus.socket. Oct 2 19:19:57.603540 systemd[1]: Starting docker.socket... Oct 2 19:19:57.645952 systemd[1]: Listening on sshd.socket. Oct 2 19:19:57.648431 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:19:57.648953 systemd[1]: Listening on docker.socket. Oct 2 19:19:57.651335 systemd[1]: Reached target sockets.target. Oct 2 19:19:57.653972 systemd[1]: Reached target basic.target. Oct 2 19:19:57.656158 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:19:57.656205 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:19:57.657155 systemd[1]: Starting containerd.service... Oct 2 19:19:57.660089 systemd[1]: Starting dbus.service... Oct 2 19:19:57.662708 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:19:57.666118 systemd[1]: Starting extend-filesystems.service... Oct 2 19:19:57.668348 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:19:57.669553 systemd[1]: Starting motdgen.service... Oct 2 19:19:57.673333 systemd[1]: Started nvidia.service. Oct 2 19:19:57.676536 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:19:57.679471 systemd[1]: Starting prepare-critools.service... Oct 2 19:19:57.683239 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:19:57.687514 systemd[1]: Starting sshd-keygen.service... Oct 2 19:19:57.692691 systemd[1]: Starting systemd-logind.service... Oct 2 19:19:57.697858 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:19:57.697945 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:19:57.698441 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:19:57.699235 systemd[1]: Starting update-engine.service... Oct 2 19:19:57.703327 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:19:57.710914 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:19:57.711134 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:19:57.772156 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:19:57.772351 systemd[1]: Finished motdgen.service. Oct 2 19:19:57.797919 extend-filesystems[1278]: Found sda Oct 2 19:19:57.797919 extend-filesystems[1278]: Found sda1 Oct 2 19:19:57.797919 extend-filesystems[1278]: Found sda2 Oct 2 19:19:57.797919 extend-filesystems[1278]: Found sda3 Oct 2 19:19:57.797919 extend-filesystems[1278]: Found usr Oct 2 19:19:57.807636 extend-filesystems[1278]: Found sda4 Oct 2 19:19:57.807636 extend-filesystems[1278]: Found sda6 Oct 2 19:19:57.807636 extend-filesystems[1278]: Found sda7 Oct 2 19:19:57.807636 extend-filesystems[1278]: Found sda9 Oct 2 19:19:57.807636 extend-filesystems[1278]: Checking size of /dev/sda9 Oct 2 19:19:57.817127 jq[1277]: false Oct 2 19:19:57.817224 jq[1295]: true Oct 2 19:19:57.812464 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:19:57.812612 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:19:57.820351 jq[1309]: true Oct 2 19:19:57.830394 systemd-logind[1288]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:19:57.838492 systemd-logind[1288]: New seat seat0. Oct 2 19:19:57.865673 env[1304]: time="2023-10-02T19:19:57.865604834Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:19:57.881691 env[1304]: time="2023-10-02T19:19:57.881643423Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:19:57.881857 env[1304]: time="2023-10-02T19:19:57.881842432Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:19:57.882899 env[1304]: time="2023-10-02T19:19:57.882873976Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:19:57.882972 env[1304]: time="2023-10-02T19:19:57.882961280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:19:57.883188 env[1304]: time="2023-10-02T19:19:57.883170389Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:19:57.883252 env[1304]: time="2023-10-02T19:19:57.883242492Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:19:57.883302 env[1304]: time="2023-10-02T19:19:57.883293294Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:19:57.883343 env[1304]: time="2023-10-02T19:19:57.883334896Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:19:57.883439 env[1304]: time="2023-10-02T19:19:57.883429800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:19:57.883655 env[1304]: time="2023-10-02T19:19:57.883640709Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:19:57.883840 env[1304]: time="2023-10-02T19:19:57.883814316Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:19:57.883840 env[1304]: time="2023-10-02T19:19:57.883835517Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:19:57.883935 env[1304]: time="2023-10-02T19:19:57.883896720Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:19:57.883935 env[1304]: time="2023-10-02T19:19:57.883913021Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:19:57.892741 tar[1298]: ./ Oct 2 19:19:57.892741 tar[1298]: ./loopback Oct 2 19:19:57.898557 tar[1299]: crictl Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.915741988Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.915779790Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.915958598Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.915998799Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916065602Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916083103Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916110404Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916130805Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916150406Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916181207Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916199208Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916216209Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916344814Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:19:57.916876 env[1304]: time="2023-10-02T19:19:57.916435818Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:19:57.917384 env[1304]: time="2023-10-02T19:19:57.916843136Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:19:57.918015 env[1304]: time="2023-10-02T19:19:57.917465062Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918015 env[1304]: time="2023-10-02T19:19:57.917496364Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:19:57.918015 env[1304]: time="2023-10-02T19:19:57.917904581Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918015 env[1304]: time="2023-10-02T19:19:57.917942183Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918015 env[1304]: time="2023-10-02T19:19:57.917965884Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918015 env[1304]: time="2023-10-02T19:19:57.917982585Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918333 env[1304]: time="2023-10-02T19:19:57.918260097Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918333 env[1304]: time="2023-10-02T19:19:57.918288698Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918333 env[1304]: time="2023-10-02T19:19:57.918305599Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918531 env[1304]: time="2023-10-02T19:19:57.918456705Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918531 env[1304]: time="2023-10-02T19:19:57.918485006Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:19:57.918804 env[1304]: time="2023-10-02T19:19:57.918785619Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918893 env[1304]: time="2023-10-02T19:19:57.918880623Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.918984 env[1304]: time="2023-10-02T19:19:57.918969027Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.919061 env[1304]: time="2023-10-02T19:19:57.919048931Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:19:57.919139 env[1304]: time="2023-10-02T19:19:57.919125534Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:19:57.919219 env[1304]: time="2023-10-02T19:19:57.919206037Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:19:57.919310 env[1304]: time="2023-10-02T19:19:57.919297941Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:19:57.919410 env[1304]: time="2023-10-02T19:19:57.919394845Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:19:57.919836 env[1304]: time="2023-10-02T19:19:57.919762461Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.920037373Z" level=info msg="Connect containerd service" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.920097376Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.920952612Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921210323Z" level=info msg="Start subscribing containerd event" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921284227Z" level=info msg="Start recovering state" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921282526Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921343629Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921350029Z" level=info msg="Start event monitor" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921390531Z" level=info msg="Start snapshots syncer" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921402232Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.921411132Z" level=info msg="Start streaming server" Oct 2 19:19:57.974616 env[1304]: time="2023-10-02T19:19:57.922947798Z" level=info msg="containerd successfully booted in 0.058689s" Oct 2 19:19:57.975129 extend-filesystems[1278]: Old size kept for /dev/sda9 Oct 2 19:19:57.975129 extend-filesystems[1278]: Found sr0 Oct 2 19:19:57.979171 tar[1298]: ./bandwidth Oct 2 19:19:57.921489 systemd[1]: Started containerd.service. Oct 2 19:19:57.949690 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:19:57.949898 systemd[1]: Finished extend-filesystems.service. Oct 2 19:19:58.039930 tar[1298]: ./ptp Oct 2 19:19:58.094945 bash[1337]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:19:58.095679 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:19:58.125212 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:19:58.156707 dbus-daemon[1276]: [system] SELinux support is enabled Oct 2 19:19:58.158889 systemd[1]: Started dbus.service. Oct 2 19:19:58.168699 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:19:58.171032 tar[1298]: ./vlan Oct 2 19:19:58.172717 systemd[1]: Reached target system-config.target. Oct 2 19:19:58.175235 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:19:58.175267 systemd[1]: Reached target user-config.target. Oct 2 19:19:58.177860 systemd[1]: Started systemd-logind.service. Oct 2 19:19:58.179743 dbus-daemon[1276]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:19:58.262747 tar[1298]: ./host-device Oct 2 19:19:58.319635 tar[1298]: ./tuning Oct 2 19:19:58.367558 tar[1298]: ./vrf Oct 2 19:19:58.447964 tar[1298]: ./sbr Oct 2 19:19:58.519305 tar[1298]: ./tap Oct 2 19:19:58.601023 tar[1298]: ./dhcp Oct 2 19:19:58.764937 systemd[1]: Finished prepare-critools.service. Oct 2 19:19:58.803669 tar[1298]: ./static Oct 2 19:19:58.835540 tar[1298]: ./firewall Oct 2 19:19:58.884185 tar[1298]: ./macvlan Oct 2 19:19:58.928656 tar[1298]: ./dummy Oct 2 19:19:58.972078 tar[1298]: ./bridge Oct 2 19:19:59.019606 tar[1298]: ./ipvlan Oct 2 19:19:59.063627 tar[1298]: ./portmap Oct 2 19:19:59.105197 tar[1298]: ./host-local Oct 2 19:19:59.165099 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:19:59.234125 update_engine[1292]: I1002 19:19:59.233566 1292 main.cc:92] Flatcar Update Engine starting Oct 2 19:19:59.331045 systemd[1]: Started update-engine.service. Oct 2 19:19:59.336086 systemd[1]: Started locksmithd.service. Oct 2 19:19:59.340180 update_engine[1292]: I1002 19:19:59.340059 1292 update_check_scheduler.cc:74] Next update check in 3m42s Oct 2 19:19:59.388882 sshd_keygen[1296]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:19:59.408083 systemd[1]: Finished sshd-keygen.service. Oct 2 19:19:59.412239 systemd[1]: Starting issuegen.service... Oct 2 19:19:59.415849 systemd[1]: Started waagent.service. Oct 2 19:19:59.422310 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:19:59.422507 systemd[1]: Finished issuegen.service. Oct 2 19:19:59.426277 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:19:59.434875 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:19:59.438380 systemd[1]: Started getty@tty1.service. Oct 2 19:19:59.441863 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:19:59.444517 systemd[1]: Reached target getty.target. Oct 2 19:19:59.446522 systemd[1]: Reached target multi-user.target. Oct 2 19:19:59.451117 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:19:59.457513 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:19:59.457641 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:19:59.460535 systemd[1]: Startup finished in 675ms (firmware) + 7.735s (loader) + 916ms (kernel) + 20.571s (initrd) + 38.035s (userspace) = 1min 7.933s. Oct 2 19:20:00.040946 login[1392]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 19:20:00.042733 login[1393]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:20:00.106964 systemd[1]: Created slice user-500.slice. Oct 2 19:20:00.108305 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:20:00.110425 systemd-logind[1288]: New session 1 of user core. Oct 2 19:20:00.145136 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:20:00.147214 systemd[1]: Starting user@500.service... Oct 2 19:20:00.150337 (systemd)[1398]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:00.409038 systemd[1398]: Queued start job for default target default.target. Oct 2 19:20:00.409682 systemd[1398]: Reached target paths.target. Oct 2 19:20:00.409710 systemd[1398]: Reached target sockets.target. Oct 2 19:20:00.409726 systemd[1398]: Reached target timers.target. Oct 2 19:20:00.409741 systemd[1398]: Reached target basic.target. Oct 2 19:20:00.409851 systemd[1]: Started user@500.service. Oct 2 19:20:00.411006 systemd[1]: Started session-1.scope. Oct 2 19:20:00.411512 systemd[1398]: Reached target default.target. Oct 2 19:20:00.411726 systemd[1398]: Startup finished in 254ms. Oct 2 19:20:01.041536 login[1392]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:20:01.047273 systemd[1]: Started session-2.scope. Oct 2 19:20:01.047777 systemd-logind[1288]: New session 2 of user core. Oct 2 19:20:01.867389 locksmithd[1378]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:20:09.354981 waagent[1387]: 2023-10-02T19:20:09.354865Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 19:20:09.359587 waagent[1387]: 2023-10-02T19:20:09.359514Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 19:20:09.362696 waagent[1387]: 2023-10-02T19:20:09.362622Z INFO Daemon Daemon Python: 3.9.16 Oct 2 19:20:09.365623 waagent[1387]: 2023-10-02T19:20:09.365552Z INFO Daemon Daemon Run daemon Oct 2 19:20:09.368170 waagent[1387]: 2023-10-02T19:20:09.368097Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 19:20:09.380500 waagent[1387]: 2023-10-02T19:20:09.380392Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:20:09.388485 waagent[1387]: 2023-10-02T19:20:09.388384Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:20:09.393337 waagent[1387]: 2023-10-02T19:20:09.393263Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:20:09.403668 waagent[1387]: 2023-10-02T19:20:09.393511Z INFO Daemon Daemon Using waagent for provisioning Oct 2 19:20:09.403668 waagent[1387]: 2023-10-02T19:20:09.395085Z INFO Daemon Daemon Activate resource disk Oct 2 19:20:09.403668 waagent[1387]: 2023-10-02T19:20:09.395888Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 19:20:09.403668 waagent[1387]: 2023-10-02T19:20:09.403580Z INFO Daemon Daemon Found device: None Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.403915Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.404742Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.406413Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.407461Z INFO Daemon Daemon Running default provisioning handler Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.416083Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.418501Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.419483Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:20:09.432393 waagent[1387]: 2023-10-02T19:20:09.420310Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 19:20:09.562703 waagent[1387]: 2023-10-02T19:20:09.561961Z INFO Daemon Daemon Successfully mounted dvd Oct 2 19:20:09.712015 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 19:20:09.747833 waagent[1387]: 2023-10-02T19:20:09.747696Z INFO Daemon Daemon Detect protocol endpoint Oct 2 19:20:09.751352 waagent[1387]: 2023-10-02T19:20:09.751269Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:20:09.754765 waagent[1387]: 2023-10-02T19:20:09.754702Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 19:20:09.758605 waagent[1387]: 2023-10-02T19:20:09.758544Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 19:20:09.761715 waagent[1387]: 2023-10-02T19:20:09.761638Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 19:20:09.764499 waagent[1387]: 2023-10-02T19:20:09.764438Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 19:20:09.998592 waagent[1387]: 2023-10-02T19:20:09.998445Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 19:20:10.006303 waagent[1387]: 2023-10-02T19:20:09.999364Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 19:20:10.006303 waagent[1387]: 2023-10-02T19:20:10.000308Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 19:20:10.641977 waagent[1387]: 2023-10-02T19:20:10.641832Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 19:20:10.650994 waagent[1387]: 2023-10-02T19:20:10.650925Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 19:20:10.656303 waagent[1387]: 2023-10-02T19:20:10.651256Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 19:20:10.715742 waagent[1387]: 2023-10-02T19:20:10.715598Z INFO Daemon Daemon Found private key matching thumbprint DB803E76DF4B072049227E7EF1D21C13EF0A7E31 Oct 2 19:20:10.720240 waagent[1387]: 2023-10-02T19:20:10.720165Z INFO Daemon Daemon Certificate with thumbprint CB27885B7760D9ED27F43F780B4563C130895942 has no matching private key. Oct 2 19:20:10.724968 waagent[1387]: 2023-10-02T19:20:10.724906Z INFO Daemon Daemon Fetch goal state completed Oct 2 19:20:10.778529 waagent[1387]: 2023-10-02T19:20:10.778429Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 150b10b3-89aa-4ab1-a369-5319400a6897 New eTag: 16964514958501730730] Oct 2 19:20:10.784514 waagent[1387]: 2023-10-02T19:20:10.784424Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:20:10.797620 waagent[1387]: 2023-10-02T19:20:10.797553Z INFO Daemon Daemon Starting provisioning Oct 2 19:20:10.800317 waagent[1387]: 2023-10-02T19:20:10.800251Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 19:20:10.802920 waagent[1387]: 2023-10-02T19:20:10.802861Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-2ed8b7e9a3] Oct 2 19:20:10.819009 waagent[1387]: 2023-10-02T19:20:10.818898Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-2ed8b7e9a3] Oct 2 19:20:10.822566 waagent[1387]: 2023-10-02T19:20:10.822492Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 19:20:10.826032 waagent[1387]: 2023-10-02T19:20:10.825971Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 19:20:10.840276 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 19:20:10.840535 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 19:20:10.840609 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 19:20:10.840964 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:20:10.846766 systemd-networkd[1162]: eth0: DHCPv6 lease lost Oct 2 19:20:10.848692 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:20:10.848850 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:20:10.851059 systemd[1]: Starting systemd-networkd.service... Oct 2 19:20:10.880597 systemd-networkd[1441]: enP61420s1: Link UP Oct 2 19:20:10.880608 systemd-networkd[1441]: enP61420s1: Gained carrier Oct 2 19:20:10.882069 systemd-networkd[1441]: eth0: Link UP Oct 2 19:20:10.882078 systemd-networkd[1441]: eth0: Gained carrier Oct 2 19:20:10.882491 systemd-networkd[1441]: lo: Link UP Oct 2 19:20:10.882501 systemd-networkd[1441]: lo: Gained carrier Oct 2 19:20:10.882871 systemd-networkd[1441]: eth0: Gained IPv6LL Oct 2 19:20:10.883133 systemd-networkd[1441]: Enumeration completed Oct 2 19:20:10.887224 waagent[1387]: 2023-10-02T19:20:10.884507Z INFO Daemon Daemon Create user account if not exists Oct 2 19:20:10.887224 waagent[1387]: 2023-10-02T19:20:10.885173Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 19:20:10.887224 waagent[1387]: 2023-10-02T19:20:10.886100Z INFO Daemon Daemon Configure sudoer Oct 2 19:20:10.883222 systemd[1]: Started systemd-networkd.service. Oct 2 19:20:10.887627 waagent[1387]: 2023-10-02T19:20:10.887571Z INFO Daemon Daemon Configure sshd Oct 2 19:20:10.888552 waagent[1387]: 2023-10-02T19:20:10.888501Z INFO Daemon Daemon Deploy ssh public key. Oct 2 19:20:10.896138 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:20:10.897768 systemd-networkd[1441]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:20:10.927748 systemd-networkd[1441]: eth0: DHCPv4 address 10.200.8.18/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:20:10.932316 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:20:12.144943 waagent[1387]: 2023-10-02T19:20:12.144849Z INFO Daemon Daemon Provisioning complete Oct 2 19:20:12.163394 waagent[1387]: 2023-10-02T19:20:12.163319Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 19:20:12.166822 waagent[1387]: 2023-10-02T19:20:12.166760Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 19:20:12.172539 waagent[1387]: 2023-10-02T19:20:12.172473Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 19:20:12.433076 waagent[1450]: 2023-10-02T19:20:12.432917Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 19:20:12.433783 waagent[1450]: 2023-10-02T19:20:12.433720Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:20:12.433929 waagent[1450]: 2023-10-02T19:20:12.433874Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:20:12.444745 waagent[1450]: 2023-10-02T19:20:12.444678Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 19:20:12.444904 waagent[1450]: 2023-10-02T19:20:12.444855Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 19:20:12.504035 waagent[1450]: 2023-10-02T19:20:12.503925Z INFO ExtHandler ExtHandler Found private key matching thumbprint DB803E76DF4B072049227E7EF1D21C13EF0A7E31 Oct 2 19:20:12.504250 waagent[1450]: 2023-10-02T19:20:12.504192Z INFO ExtHandler ExtHandler Certificate with thumbprint CB27885B7760D9ED27F43F780B4563C130895942 has no matching private key. Oct 2 19:20:12.504497 waagent[1450]: 2023-10-02T19:20:12.504447Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 19:20:12.518110 waagent[1450]: 2023-10-02T19:20:12.518047Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 58766bdd-3f65-4283-b27c-5716f7680e8c New eTag: 16964514958501730730] Oct 2 19:20:12.518650 waagent[1450]: 2023-10-02T19:20:12.518592Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:20:12.562961 waagent[1450]: 2023-10-02T19:20:12.562839Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:20:12.573555 waagent[1450]: 2023-10-02T19:20:12.573484Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1450 Oct 2 19:20:12.576865 waagent[1450]: 2023-10-02T19:20:12.576808Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:20:12.578099 waagent[1450]: 2023-10-02T19:20:12.578043Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:20:12.598904 waagent[1450]: 2023-10-02T19:20:12.598846Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:20:12.599432 waagent[1450]: 2023-10-02T19:20:12.599369Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:20:12.607092 waagent[1450]: 2023-10-02T19:20:12.607039Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:20:12.607525 waagent[1450]: 2023-10-02T19:20:12.607469Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:20:12.608522 waagent[1450]: 2023-10-02T19:20:12.608462Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 19:20:12.609781 waagent[1450]: 2023-10-02T19:20:12.609723Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:20:12.610370 waagent[1450]: 2023-10-02T19:20:12.610313Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:20:12.611034 waagent[1450]: 2023-10-02T19:20:12.610974Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:20:12.611123 waagent[1450]: 2023-10-02T19:20:12.611064Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:20:12.611272 waagent[1450]: 2023-10-02T19:20:12.611224Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:20:12.611767 waagent[1450]: 2023-10-02T19:20:12.611714Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:20:12.612104 waagent[1450]: 2023-10-02T19:20:12.612046Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:20:12.612347 waagent[1450]: 2023-10-02T19:20:12.612283Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:20:12.612451 waagent[1450]: 2023-10-02T19:20:12.612377Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:20:12.613847 waagent[1450]: 2023-10-02T19:20:12.613795Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:20:12.614410 waagent[1450]: 2023-10-02T19:20:12.614359Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:20:12.614589 waagent[1450]: 2023-10-02T19:20:12.614522Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:20:12.615360 waagent[1450]: 2023-10-02T19:20:12.615303Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:20:12.615711 waagent[1450]: 2023-10-02T19:20:12.615638Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:20:12.615711 waagent[1450]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:20:12.615711 waagent[1450]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:20:12.615711 waagent[1450]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:20:12.615711 waagent[1450]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:20:12.615711 waagent[1450]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:20:12.615711 waagent[1450]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:20:12.616072 waagent[1450]: 2023-10-02T19:20:12.616025Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:20:12.622535 waagent[1450]: 2023-10-02T19:20:12.622479Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:20:12.625431 waagent[1450]: 2023-10-02T19:20:12.625376Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 19:20:12.626636 waagent[1450]: 2023-10-02T19:20:12.626578Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:20:12.631148 waagent[1450]: 2023-10-02T19:20:12.631033Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 19:20:12.641861 waagent[1450]: 2023-10-02T19:20:12.641807Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1441' Oct 2 19:20:12.676615 waagent[1450]: 2023-10-02T19:20:12.676525Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 19:20:12.791262 waagent[1450]: 2023-10-02T19:20:12.791073Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:20:12.791262 waagent[1450]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:20:12.791262 waagent[1450]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:20:12.791262 waagent[1450]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b6:9c:be brd ff:ff:ff:ff:ff:ff Oct 2 19:20:12.791262 waagent[1450]: 3: enP61420s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b6:9c:be brd ff:ff:ff:ff:ff:ff\ altname enP61420p0s2 Oct 2 19:20:12.791262 waagent[1450]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:20:12.791262 waagent[1450]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:20:12.791262 waagent[1450]: 2: eth0 inet 10.200.8.18/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:20:12.791262 waagent[1450]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:20:12.791262 waagent[1450]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:20:12.791262 waagent[1450]: 2: eth0 inet6 fe80::20d:3aff:feb6:9cbe/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:20:13.091232 waagent[1450]: 2023-10-02T19:20:13.091080Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 19:20:13.094584 waagent[1450]: 2023-10-02T19:20:13.094479Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 19:20:13.094584 waagent[1450]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:20:13.094584 waagent[1450]: pkts bytes target prot opt in out source destination Oct 2 19:20:13.094584 waagent[1450]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:20:13.094584 waagent[1450]: pkts bytes target prot opt in out source destination Oct 2 19:20:13.094584 waagent[1450]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:20:13.094584 waagent[1450]: pkts bytes target prot opt in out source destination Oct 2 19:20:13.094584 waagent[1450]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:20:13.094584 waagent[1450]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:20:13.095952 waagent[1450]: 2023-10-02T19:20:13.095897Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 19:20:13.132844 waagent[1450]: 2023-10-02T19:20:13.132773Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 19:20:13.175887 waagent[1387]: 2023-10-02T19:20:13.175755Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 19:20:13.181572 waagent[1387]: 2023-10-02T19:20:13.181514Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 19:20:14.172753 waagent[1491]: 2023-10-02T19:20:14.172638Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 19:20:14.173425 waagent[1491]: 2023-10-02T19:20:14.173360Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 19:20:14.173570 waagent[1491]: 2023-10-02T19:20:14.173517Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 19:20:14.182687 waagent[1491]: 2023-10-02T19:20:14.182581Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:20:14.183066 waagent[1491]: 2023-10-02T19:20:14.183010Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:20:14.183224 waagent[1491]: 2023-10-02T19:20:14.183176Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:20:14.194687 waagent[1491]: 2023-10-02T19:20:14.194598Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 19:20:14.203052 waagent[1491]: 2023-10-02T19:20:14.202995Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 19:20:14.203942 waagent[1491]: 2023-10-02T19:20:14.203885Z INFO ExtHandler Oct 2 19:20:14.204091 waagent[1491]: 2023-10-02T19:20:14.204041Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 972445c5-8c8c-4498-9f01-cb0476a33f46 eTag: 16964514958501730730 source: Fabric] Oct 2 19:20:14.204779 waagent[1491]: 2023-10-02T19:20:14.204724Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 19:20:14.205850 waagent[1491]: 2023-10-02T19:20:14.205793Z INFO ExtHandler Oct 2 19:20:14.205982 waagent[1491]: 2023-10-02T19:20:14.205933Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 19:20:14.212432 waagent[1491]: 2023-10-02T19:20:14.212385Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 19:20:14.212870 waagent[1491]: 2023-10-02T19:20:14.212822Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:20:14.232635 waagent[1491]: 2023-10-02T19:20:14.232559Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 19:20:14.294004 waagent[1491]: 2023-10-02T19:20:14.293878Z INFO ExtHandler Downloaded certificate {'thumbprint': 'DB803E76DF4B072049227E7EF1D21C13EF0A7E31', 'hasPrivateKey': True} Oct 2 19:20:14.294947 waagent[1491]: 2023-10-02T19:20:14.294884Z INFO ExtHandler Downloaded certificate {'thumbprint': 'CB27885B7760D9ED27F43F780B4563C130895942', 'hasPrivateKey': False} Oct 2 19:20:14.295880 waagent[1491]: 2023-10-02T19:20:14.295822Z INFO ExtHandler Fetch goal state completed Oct 2 19:20:14.318263 waagent[1491]: 2023-10-02T19:20:14.318189Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1491 Oct 2 19:20:14.321462 waagent[1491]: 2023-10-02T19:20:14.321401Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:20:14.322902 waagent[1491]: 2023-10-02T19:20:14.322848Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:20:14.327571 waagent[1491]: 2023-10-02T19:20:14.327516Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:20:14.327946 waagent[1491]: 2023-10-02T19:20:14.327889Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:20:14.335468 waagent[1491]: 2023-10-02T19:20:14.335414Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:20:14.335927 waagent[1491]: 2023-10-02T19:20:14.335874Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:20:14.375783 waagent[1491]: 2023-10-02T19:20:14.375617Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 19:20:14.379099 waagent[1491]: 2023-10-02T19:20:14.378992Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 19:20:14.384489 waagent[1491]: 2023-10-02T19:20:14.384429Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 19:20:14.385896 waagent[1491]: 2023-10-02T19:20:14.385838Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:20:14.386311 waagent[1491]: 2023-10-02T19:20:14.386255Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:20:14.386657 waagent[1491]: 2023-10-02T19:20:14.386602Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:20:14.387188 waagent[1491]: 2023-10-02T19:20:14.387131Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:20:14.387454 waagent[1491]: 2023-10-02T19:20:14.387399Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:20:14.387454 waagent[1491]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:20:14.387454 waagent[1491]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:20:14.387454 waagent[1491]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:20:14.387454 waagent[1491]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:20:14.387454 waagent[1491]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:20:14.387454 waagent[1491]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:20:14.389673 waagent[1491]: 2023-10-02T19:20:14.389576Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:20:14.390563 waagent[1491]: 2023-10-02T19:20:14.390505Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:20:14.390854 waagent[1491]: 2023-10-02T19:20:14.390782Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:20:14.391134 waagent[1491]: 2023-10-02T19:20:14.391081Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:20:14.393638 waagent[1491]: 2023-10-02T19:20:14.393401Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:20:14.394505 waagent[1491]: 2023-10-02T19:20:14.394448Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:20:14.394943 waagent[1491]: 2023-10-02T19:20:14.394890Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:20:14.395625 waagent[1491]: 2023-10-02T19:20:14.395569Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:20:14.398310 waagent[1491]: 2023-10-02T19:20:14.398240Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:20:14.398444 waagent[1491]: 2023-10-02T19:20:14.398390Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:20:14.406354 waagent[1491]: 2023-10-02T19:20:14.406248Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:20:14.406354 waagent[1491]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:20:14.406354 waagent[1491]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:20:14.406354 waagent[1491]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b6:9c:be brd ff:ff:ff:ff:ff:ff Oct 2 19:20:14.406354 waagent[1491]: 3: enP61420s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b6:9c:be brd ff:ff:ff:ff:ff:ff\ altname enP61420p0s2 Oct 2 19:20:14.406354 waagent[1491]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:20:14.406354 waagent[1491]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:20:14.406354 waagent[1491]: 2: eth0 inet 10.200.8.18/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:20:14.406354 waagent[1491]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:20:14.406354 waagent[1491]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:20:14.406354 waagent[1491]: 2: eth0 inet6 fe80::20d:3aff:feb6:9cbe/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:20:14.415427 waagent[1491]: 2023-10-02T19:20:14.415310Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:20:14.422317 waagent[1491]: 2023-10-02T19:20:14.422259Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 19:20:14.460607 waagent[1491]: 2023-10-02T19:20:14.460491Z INFO ExtHandler ExtHandler Oct 2 19:20:14.460736 waagent[1491]: 2023-10-02T19:20:14.460680Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: de74d09f-559a-4777-982a-2652749947f4 correlation 7f7e9ef4-7d53-436b-89d4-a3b0b44033f5 created: 2023-10-02T19:18:41.968323Z] Oct 2 19:20:14.461541 waagent[1491]: 2023-10-02T19:20:14.461481Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 19:20:14.463305 waagent[1491]: 2023-10-02T19:20:14.463249Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 2 ms] Oct 2 19:20:14.489472 waagent[1491]: 2023-10-02T19:20:14.489398Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 19:20:14.509873 waagent[1491]: 2023-10-02T19:20:14.509738Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 1253B9DA-D724-4BDB-93C5-CB2CB2F960FA;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 19:20:14.521646 waagent[1491]: 2023-10-02T19:20:14.521582Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 19:20:14.521646 waagent[1491]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:20:14.521646 waagent[1491]: pkts bytes target prot opt in out source destination Oct 2 19:20:14.521646 waagent[1491]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:20:14.521646 waagent[1491]: pkts bytes target prot opt in out source destination Oct 2 19:20:14.521646 waagent[1491]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:20:14.521646 waagent[1491]: pkts bytes target prot opt in out source destination Oct 2 19:20:14.521646 waagent[1491]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 19:20:14.521646 waagent[1491]: 11 1166 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:20:14.521646 waagent[1491]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:20:31.801898 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 19:20:44.972918 update_engine[1292]: I1002 19:20:44.972796 1292 update_attempter.cc:505] Updating boot flags... Oct 2 19:20:49.075019 systemd[1]: Created slice system-sshd.slice. Oct 2 19:20:49.076875 systemd[1]: Started sshd@0-10.200.8.18:22-10.200.12.6:60908.service. Oct 2 19:20:50.044134 sshd[1571]: Accepted publickey for core from 10.200.12.6 port 60908 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:50.045528 sshd[1571]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:50.049073 systemd-logind[1288]: New session 3 of user core. Oct 2 19:20:50.050624 systemd[1]: Started session-3.scope. Oct 2 19:20:50.594601 systemd[1]: Started sshd@1-10.200.8.18:22-10.200.12.6:60920.service. Oct 2 19:20:51.228199 sshd[1576]: Accepted publickey for core from 10.200.12.6 port 60920 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:51.229814 sshd[1576]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:51.235345 systemd[1]: Started session-4.scope. Oct 2 19:20:51.236130 systemd-logind[1288]: New session 4 of user core. Oct 2 19:20:52.007043 sshd[1576]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:52.010044 systemd[1]: sshd@1-10.200.8.18:22-10.200.12.6:60920.service: Deactivated successfully. Oct 2 19:20:52.010916 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:20:52.011553 systemd-logind[1288]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:20:52.012349 systemd-logind[1288]: Removed session 4. Oct 2 19:20:52.112322 systemd[1]: Started sshd@2-10.200.8.18:22-10.200.12.6:60930.service. Oct 2 19:20:53.024829 sshd[1582]: Accepted publickey for core from 10.200.12.6 port 60930 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:53.026414 sshd[1582]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:53.031024 systemd[1]: Started session-5.scope. Oct 2 19:20:53.031478 systemd-logind[1288]: New session 5 of user core. Oct 2 19:20:53.479066 sshd[1582]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:53.482217 systemd[1]: sshd@2-10.200.8.18:22-10.200.12.6:60930.service: Deactivated successfully. Oct 2 19:20:53.483150 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:20:53.483906 systemd-logind[1288]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:20:53.484814 systemd-logind[1288]: Removed session 5. Oct 2 19:20:53.583249 systemd[1]: Started sshd@3-10.200.8.18:22-10.200.12.6:60934.service. Oct 2 19:20:54.215630 sshd[1588]: Accepted publickey for core from 10.200.12.6 port 60934 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:54.217226 sshd[1588]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:54.222103 systemd[1]: Started session-6.scope. Oct 2 19:20:54.222808 systemd-logind[1288]: New session 6 of user core. Oct 2 19:20:54.661783 sshd[1588]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:54.665051 systemd[1]: sshd@3-10.200.8.18:22-10.200.12.6:60934.service: Deactivated successfully. Oct 2 19:20:54.665987 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:20:54.666778 systemd-logind[1288]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:20:54.667528 systemd-logind[1288]: Removed session 6. Oct 2 19:20:54.769841 systemd[1]: Started sshd@4-10.200.8.18:22-10.200.12.6:60942.service. Oct 2 19:20:55.402069 sshd[1594]: Accepted publickey for core from 10.200.12.6 port 60942 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:55.403697 sshd[1594]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:55.409327 systemd[1]: Started session-7.scope. Oct 2 19:20:55.410190 systemd-logind[1288]: New session 7 of user core. Oct 2 19:20:56.251919 sudo[1597]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:20:56.252259 sudo[1597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:20:56.290868 dbus-daemon[1276]: \xd0]: received setenforce notice (enforcing=-214664800) Oct 2 19:20:56.292651 sudo[1597]: pam_unix(sudo:session): session closed for user root Oct 2 19:20:56.426151 sshd[1594]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:56.429954 systemd[1]: sshd@4-10.200.8.18:22-10.200.12.6:60942.service: Deactivated successfully. Oct 2 19:20:56.430953 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:20:56.431572 systemd-logind[1288]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:20:56.432425 systemd-logind[1288]: Removed session 7. Oct 2 19:20:56.531278 systemd[1]: Started sshd@5-10.200.8.18:22-10.200.12.6:60946.service. Oct 2 19:20:57.159090 sshd[1601]: Accepted publickey for core from 10.200.12.6 port 60946 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:57.160778 sshd[1601]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:57.165846 systemd[1]: Started session-8.scope. Oct 2 19:20:57.166277 systemd-logind[1288]: New session 8 of user core. Oct 2 19:20:57.502104 sudo[1605]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:20:57.502603 sudo[1605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:20:57.505272 sudo[1605]: pam_unix(sudo:session): session closed for user root Oct 2 19:20:57.509624 sudo[1604]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:20:57.509903 sudo[1604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:20:57.518285 systemd[1]: Stopping audit-rules.service... Oct 2 19:20:57.518000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:20:57.520799 auditctl[1608]: No rules Oct 2 19:20:57.523674 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:20:57.523741 kernel: audit: type=1305 audit(1696274457.518:174): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:20:57.521205 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:20:57.521345 systemd[1]: Stopped audit-rules.service. Oct 2 19:20:57.523466 systemd[1]: Starting audit-rules.service... Oct 2 19:20:57.518000 audit[1608]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff982dd9f0 a2=420 a3=0 items=0 ppid=1 pid=1608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:57.545029 sudo[1604]: pam_unix(sudo:session): session closed for user root Oct 2 19:20:57.544188 systemd[1]: Finished audit-rules.service. Oct 2 19:20:57.546911 augenrules[1625]: No rules Oct 2 19:20:57.518000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:20:57.553362 kernel: audit: type=1300 audit(1696274457.518:174): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff982dd9f0 a2=420 a3=0 items=0 ppid=1 pid=1608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:57.553428 kernel: audit: type=1327 audit(1696274457.518:174): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:20:57.553457 kernel: audit: type=1131 audit(1696274457.518:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.575340 kernel: audit: type=1130 audit(1696274457.542:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.575402 kernel: audit: type=1106 audit(1696274457.543:177): pid=1604 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.543000 audit[1604]: USER_END pid=1604 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.543000 audit[1604]: CRED_DISP pid=1604 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.599236 kernel: audit: type=1104 audit(1696274457.543:178): pid=1604 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.645594 sshd[1601]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:57.646000 audit[1601]: USER_END pid=1601 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:57.649149 systemd-logind[1288]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:20:57.650901 systemd[1]: sshd@5-10.200.8.18:22-10.200.12.6:60946.service: Deactivated successfully. Oct 2 19:20:57.651580 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:20:57.652876 systemd-logind[1288]: Removed session 8. Oct 2 19:20:57.646000 audit[1601]: CRED_DISP pid=1601 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:57.675403 kernel: audit: type=1106 audit(1696274457.646:179): pid=1601 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:57.675464 kernel: audit: type=1104 audit(1696274457.646:180): pid=1601 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:57.675495 kernel: audit: type=1131 audit(1696274457.650:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.18:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.18:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:57.751301 systemd[1]: Started sshd@6-10.200.8.18:22-10.200.12.6:46320.service. Oct 2 19:20:57.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.18:22-10.200.12.6:46320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:58.383000 audit[1631]: USER_ACCT pid=1631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:58.384197 sshd[1631]: Accepted publickey for core from 10.200.12.6 port 46320 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:58.384000 audit[1631]: CRED_ACQ pid=1631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:58.384000 audit[1631]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9c6105b0 a2=3 a3=0 items=0 ppid=1 pid=1631 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:58.384000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:58.385887 sshd[1631]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:58.391437 systemd[1]: Started session-9.scope. Oct 2 19:20:58.392183 systemd-logind[1288]: New session 9 of user core. Oct 2 19:20:58.396000 audit[1631]: USER_START pid=1631 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:58.397000 audit[1633]: CRED_ACQ pid=1633 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:58.729000 audit[1634]: USER_ACCT pid=1634 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:20:58.729000 audit[1634]: CRED_REFR pid=1634 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:20:58.730134 sudo[1634]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:20:58.730387 sudo[1634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:20:58.731000 audit[1634]: USER_START pid=1634 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:20:59.895191 systemd[1]: Starting docker.service... Oct 2 19:20:59.930300 env[1649]: time="2023-10-02T19:20:59.930238556Z" level=info msg="Starting up" Oct 2 19:20:59.931469 env[1649]: time="2023-10-02T19:20:59.931432701Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:20:59.931469 env[1649]: time="2023-10-02T19:20:59.931452701Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:20:59.931469 env[1649]: time="2023-10-02T19:20:59.931471002Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:20:59.931680 env[1649]: time="2023-10-02T19:20:59.931482503Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:20:59.933208 env[1649]: time="2023-10-02T19:20:59.933175366Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:20:59.933208 env[1649]: time="2023-10-02T19:20:59.933194867Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:20:59.933208 env[1649]: time="2023-10-02T19:20:59.933209767Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:20:59.933382 env[1649]: time="2023-10-02T19:20:59.933218768Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:20:59.939739 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport4112260502-merged.mount: Deactivated successfully. Oct 2 19:21:00.046531 env[1649]: time="2023-10-02T19:21:00.046490572Z" level=info msg="Loading containers: start." Oct 2 19:21:00.100000 audit[1676]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.100000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffda07376c0 a2=0 a3=7ffda07376ac items=0 ppid=1649 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.100000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:21:00.101000 audit[1678]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.101000 audit[1678]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe5a4bcf90 a2=0 a3=7ffe5a4bcf7c items=0 ppid=1649 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.101000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:21:00.103000 audit[1680]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.103000 audit[1680]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdcb728d70 a2=0 a3=7ffdcb728d5c items=0 ppid=1649 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.103000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:21:00.105000 audit[1682]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.105000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc1eedc750 a2=0 a3=7ffc1eedc73c items=0 ppid=1649 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.105000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:21:00.107000 audit[1684]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.107000 audit[1684]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd5f791de0 a2=0 a3=7ffd5f791dcc items=0 ppid=1649 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.107000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:21:00.109000 audit[1686]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.109000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdc379bd00 a2=0 a3=7ffdc379bcec items=0 ppid=1649 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.109000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:21:00.125000 audit[1688]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.125000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd770fa980 a2=0 a3=7ffd770fa96c items=0 ppid=1649 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.125000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:21:00.127000 audit[1690]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.127000 audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc4e4dd0f0 a2=0 a3=7ffc4e4dd0dc items=0 ppid=1649 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.127000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:21:00.129000 audit[1692]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.129000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff24a0c480 a2=0 a3=7fff24a0c46c items=0 ppid=1649 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.129000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:00.144000 audit[1696]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.144000 audit[1696]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff861026a0 a2=0 a3=7fff8610268c items=0 ppid=1649 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.144000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:00.146000 audit[1697]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.146000 audit[1697]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc1c26dee0 a2=0 a3=7ffc1c26decc items=0 ppid=1649 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.146000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:00.219691 kernel: Initializing XFRM netlink socket Oct 2 19:21:00.295765 env[1649]: time="2023-10-02T19:21:00.295727172Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:21:00.415000 audit[1705]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.415000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd61c9da50 a2=0 a3=7ffd61c9da3c items=0 ppid=1649 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.415000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:21:00.457000 audit[1709]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.457000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff6cd3c100 a2=0 a3=7fff6cd3c0ec items=0 ppid=1649 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.457000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:21:00.460000 audit[1712]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.460000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd5d519520 a2=0 a3=7ffd5d51950c items=0 ppid=1649 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.460000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:21:00.462000 audit[1714]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.462000 audit[1714]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff4b1f6630 a2=0 a3=7fff4b1f661c items=0 ppid=1649 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:21:00.464000 audit[1716]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.464000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc61629fb0 a2=0 a3=7ffc61629f9c items=0 ppid=1649 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.464000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:21:00.466000 audit[1718]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.466000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc7b787470 a2=0 a3=7ffc7b78745c items=0 ppid=1649 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:21:00.468000 audit[1720]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.468000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd8aa3f6f0 a2=0 a3=7ffd8aa3f6dc items=0 ppid=1649 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:21:00.470000 audit[1722]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.470000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffee37a0aa0 a2=0 a3=7ffee37a0a8c items=0 ppid=1649 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.470000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:21:00.472000 audit[1724]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.472000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffee5670530 a2=0 a3=7ffee567051c items=0 ppid=1649 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.472000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:21:00.474000 audit[1726]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.474000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd0a8307f0 a2=0 a3=7ffd0a8307dc items=0 ppid=1649 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.474000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:21:00.476000 audit[1728]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.476000 audit[1728]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffec491b0b0 a2=0 a3=7ffec491b09c items=0 ppid=1649 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.476000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:21:00.477542 systemd-networkd[1441]: docker0: Link UP Oct 2 19:21:00.496000 audit[1732]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.496000 audit[1732]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffffdd74420 a2=0 a3=7ffffdd7440c items=0 ppid=1649 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.496000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:00.496000 audit[1733]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1733 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:00.496000 audit[1733]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd2ab7ddf0 a2=0 a3=7ffd2ab7dddc items=0 ppid=1649 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:00.496000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:00.498053 env[1649]: time="2023-10-02T19:21:00.498007457Z" level=info msg="Loading containers: done." Oct 2 19:21:00.512209 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck173307765-merged.mount: Deactivated successfully. Oct 2 19:21:00.556921 env[1649]: time="2023-10-02T19:21:00.556861906Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:21:00.557166 env[1649]: time="2023-10-02T19:21:00.557133416Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:21:00.557317 env[1649]: time="2023-10-02T19:21:00.557288422Z" level=info msg="Daemon has completed initialization" Oct 2 19:21:00.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:00.588793 systemd[1]: Started docker.service. Oct 2 19:21:00.596179 env[1649]: time="2023-10-02T19:21:00.596122540Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:21:00.613383 systemd[1]: Reloading. Oct 2 19:21:00.704174 /usr/lib/systemd/system-generators/torcx-generator[1780]: time="2023-10-02T19:21:00Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:21:00.704213 /usr/lib/systemd/system-generators/torcx-generator[1780]: time="2023-10-02T19:21:00Z" level=info msg="torcx already run" Oct 2 19:21:00.777027 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:21:00.777048 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:21:00.793972 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.862000 audit: BPF prog-id=38 op=LOAD Oct 2 19:21:00.862000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit: BPF prog-id=39 op=LOAD Oct 2 19:21:00.864000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit: BPF prog-id=40 op=LOAD Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.864000 audit: BPF prog-id=41 op=LOAD Oct 2 19:21:00.864000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:21:00.864000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.866000 audit: BPF prog-id=42 op=LOAD Oct 2 19:21:00.866000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.868000 audit: BPF prog-id=43 op=LOAD Oct 2 19:21:00.868000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit: BPF prog-id=44 op=LOAD Oct 2 19:21:00.869000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.869000 audit: BPF prog-id=45 op=LOAD Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.870000 audit: BPF prog-id=46 op=LOAD Oct 2 19:21:00.870000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:21:00.870000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit: BPF prog-id=47 op=LOAD Oct 2 19:21:00.872000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit: BPF prog-id=48 op=LOAD Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.872000 audit: BPF prog-id=49 op=LOAD Oct 2 19:21:00.872000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:21:00.872000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:21:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.874000 audit: BPF prog-id=50 op=LOAD Oct 2 19:21:00.874000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit: BPF prog-id=51 op=LOAD Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:00.875000 audit: BPF prog-id=52 op=LOAD Oct 2 19:21:00.875000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:21:00.875000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:21:00.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:00.885970 systemd[1]: Started kubelet.service. Oct 2 19:21:00.955696 kubelet[1841]: E1002 19:21:00.955635 1841 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:21:00.957486 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:21:00.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:00.957594 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:21:07.389542 env[1304]: time="2023-10-02T19:21:07.389479071Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:21:08.075406 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2269438165.mount: Deactivated successfully. Oct 2 19:21:10.327979 env[1304]: time="2023-10-02T19:21:10.327928569Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:10.338077 env[1304]: time="2023-10-02T19:21:10.338035751Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:10.341301 env[1304]: time="2023-10-02T19:21:10.341269442Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:10.344463 env[1304]: time="2023-10-02T19:21:10.344435330Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:10.345056 env[1304]: time="2023-10-02T19:21:10.345026047Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce\"" Oct 2 19:21:10.354732 env[1304]: time="2023-10-02T19:21:10.354706617Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:21:11.048958 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:21:11.056849 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 19:21:11.056938 kernel: audit: type=1130 audit(1696274471.048:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:11.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:11.049329 systemd[1]: Stopped kubelet.service. Oct 2 19:21:11.051193 systemd[1]: Started kubelet.service. Oct 2 19:21:11.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:11.077866 kernel: audit: type=1131 audit(1696274471.048:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:11.091484 kernel: audit: type=1130 audit(1696274471.050:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:11.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:11.132753 kubelet[1869]: E1002 19:21:11.132706 1869 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:21:11.135823 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:21:11.135980 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:21:11.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:11.149682 kernel: audit: type=1131 audit(1696274471.135:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:12.820211 env[1304]: time="2023-10-02T19:21:12.820151678Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.827157 env[1304]: time="2023-10-02T19:21:12.827100563Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.831582 env[1304]: time="2023-10-02T19:21:12.831544981Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.839264 env[1304]: time="2023-10-02T19:21:12.839236185Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.839951 env[1304]: time="2023-10-02T19:21:12.839917303Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57\"" Oct 2 19:21:12.850438 env[1304]: time="2023-10-02T19:21:12.850413182Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:21:15.234835 env[1304]: time="2023-10-02T19:21:15.234775237Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:15.240257 env[1304]: time="2023-10-02T19:21:15.240209571Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:15.244891 env[1304]: time="2023-10-02T19:21:15.244808784Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:15.249381 env[1304]: time="2023-10-02T19:21:15.249353296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:15.250054 env[1304]: time="2023-10-02T19:21:15.250023413Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8\"" Oct 2 19:21:15.260115 env[1304]: time="2023-10-02T19:21:15.260090060Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:21:16.285021 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount716463703.mount: Deactivated successfully. Oct 2 19:21:16.852330 env[1304]: time="2023-10-02T19:21:16.852275105Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:16.858334 env[1304]: time="2023-10-02T19:21:16.858298450Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:16.861985 env[1304]: time="2023-10-02T19:21:16.861946337Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:16.865909 env[1304]: time="2023-10-02T19:21:16.865870432Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:16.866224 env[1304]: time="2023-10-02T19:21:16.866192739Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0\"" Oct 2 19:21:16.876047 env[1304]: time="2023-10-02T19:21:16.876020375Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:21:17.390958 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2895767008.mount: Deactivated successfully. Oct 2 19:21:17.415430 env[1304]: time="2023-10-02T19:21:17.415382871Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.429813 env[1304]: time="2023-10-02T19:21:17.429774508Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.433822 env[1304]: time="2023-10-02T19:21:17.433735901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.439445 env[1304]: time="2023-10-02T19:21:17.439402333Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.440077 env[1304]: time="2023-10-02T19:21:17.440041548Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:21:17.460805 env[1304]: time="2023-10-02T19:21:17.460777133Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:21:21.299062 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:21:21.299332 systemd[1]: Stopped kubelet.service. Oct 2 19:21:21.316588 kernel: audit: type=1130 audit(1696274481.297:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:21.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:21.316137 systemd[1]: Started kubelet.service. Oct 2 19:21:21.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:21.346870 kernel: audit: type=1131 audit(1696274481.297:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:21.346955 kernel: audit: type=1130 audit(1696274481.314:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:21.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:21.404927 kubelet[1895]: E1002 19:21:21.404879 1895 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:21:21.422890 kernel: audit: type=1131 audit(1696274481.406:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:21.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:21.407458 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:21:21.407618 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:21:22.654969 env[1304]: time="2023-10-02T19:21:22.654907749Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:22.660859 env[1304]: time="2023-10-02T19:21:22.660821971Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:22.665637 env[1304]: time="2023-10-02T19:21:22.665543069Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:22.670260 env[1304]: time="2023-10-02T19:21:22.670227866Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:22.670999 env[1304]: time="2023-10-02T19:21:22.670968781Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 19:21:22.680996 env[1304]: time="2023-10-02T19:21:22.680969188Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:21:23.305077 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1647161613.mount: Deactivated successfully. Oct 2 19:21:23.989720 env[1304]: time="2023-10-02T19:21:23.989655004Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:23.998918 env[1304]: time="2023-10-02T19:21:23.998878491Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:24.007920 env[1304]: time="2023-10-02T19:21:24.007887870Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:24.018679 env[1304]: time="2023-10-02T19:21:24.018628882Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:24.019164 env[1304]: time="2023-10-02T19:21:24.019133692Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:21:26.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:26.213594 systemd[1]: Stopped kubelet.service. Oct 2 19:21:26.242683 kernel: audit: type=1130 audit(1696274486.212:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:26.242803 kernel: audit: type=1131 audit(1696274486.215:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:26.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:26.233556 systemd[1]: Reloading. Oct 2 19:21:26.307208 /usr/lib/systemd/system-generators/torcx-generator[1992]: time="2023-10-02T19:21:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:21:26.307247 /usr/lib/systemd/system-generators/torcx-generator[1992]: time="2023-10-02T19:21:26Z" level=info msg="torcx already run" Oct 2 19:21:26.400169 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:21:26.400189 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:21:26.416069 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497676 kernel: audit: type=1400 audit(1696274486.481:400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.532302 kernel: audit: type=1400 audit(1696274486.481:401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.532365 kernel: audit: audit_backlog=64 > audit_backlog_limit=64 Oct 2 19:21:26.532387 kernel: audit: type=1400 audit(1696274486.481:402): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.532409 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.550582 kernel: audit: type=1400 audit(1696274486.481:403): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.550649 kernel: audit: backlog limit exceeded Oct 2 19:21:26.550685 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.558671 kernel: audit: type=1400 audit(1696274486.481:404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.558728 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.495000 audit: BPF prog-id=53 op=LOAD Oct 2 19:21:26.495000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.496000 audit: BPF prog-id=54 op=LOAD Oct 2 19:21:26.496000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit: BPF prog-id=55 op=LOAD Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.497000 audit: BPF prog-id=56 op=LOAD Oct 2 19:21:26.497000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:21:26.497000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.499000 audit: BPF prog-id=57 op=LOAD Oct 2 19:21:26.499000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.536000 audit: BPF prog-id=58 op=LOAD Oct 2 19:21:26.536000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit: BPF prog-id=59 op=LOAD Oct 2 19:21:26.574000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit: BPF prog-id=60 op=LOAD Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.574000 audit: BPF prog-id=61 op=LOAD Oct 2 19:21:26.574000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:21:26.574000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit: BPF prog-id=62 op=LOAD Oct 2 19:21:26.576000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit: BPF prog-id=63 op=LOAD Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.576000 audit: BPF prog-id=64 op=LOAD Oct 2 19:21:26.576000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:21:26.576000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.578000 audit: BPF prog-id=65 op=LOAD Oct 2 19:21:26.578000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit: BPF prog-id=66 op=LOAD Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.579000 audit: BPF prog-id=67 op=LOAD Oct 2 19:21:26.579000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:21:26.579000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:21:26.595748 systemd[1]: Started kubelet.service. Oct 2 19:21:26.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:26.640576 kubelet[2054]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:26.640576 kubelet[2054]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:21:26.640576 kubelet[2054]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:26.641025 kubelet[2054]: I1002 19:21:26.640620 2054 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:21:26.807745 kubelet[2054]: I1002 19:21:26.807719 2054 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:21:26.807893 kubelet[2054]: I1002 19:21:26.807882 2054 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:21:26.808217 kubelet[2054]: I1002 19:21:26.808203 2054 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:21:26.812932 kubelet[2054]: E1002 19:21:26.812911 2054 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.18:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.813033 kubelet[2054]: I1002 19:21:26.812971 2054 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:21:26.818754 kubelet[2054]: I1002 19:21:26.818724 2054 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:21:26.819077 kubelet[2054]: I1002 19:21:26.819021 2054 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:21:26.819261 kubelet[2054]: I1002 19:21:26.819228 2054 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:21:26.819412 kubelet[2054]: I1002 19:21:26.819265 2054 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:21:26.819412 kubelet[2054]: I1002 19:21:26.819278 2054 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:21:26.819412 kubelet[2054]: I1002 19:21:26.819379 2054 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:26.819547 kubelet[2054]: I1002 19:21:26.819497 2054 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:21:26.819547 kubelet[2054]: I1002 19:21:26.819515 2054 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:21:26.820892 kubelet[2054]: I1002 19:21:26.819931 2054 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:21:26.821709 kubelet[2054]: I1002 19:21:26.821692 2054 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:21:26.822105 kubelet[2054]: W1002 19:21:26.822063 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2ed8b7e9a3&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.822243 kubelet[2054]: E1002 19:21:26.822231 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2ed8b7e9a3&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.822865 kubelet[2054]: W1002 19:21:26.822806 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.823027 kubelet[2054]: E1002 19:21:26.823017 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.823181 kubelet[2054]: I1002 19:21:26.823169 2054 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:21:26.823563 kubelet[2054]: W1002 19:21:26.823547 2054 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:21:26.824622 kubelet[2054]: I1002 19:21:26.824604 2054 server.go:1232] "Started kubelet" Oct 2 19:21:26.824000 audit[2054]: AVC avc: denied { mac_admin } for pid=2054 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.824000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:26.826574 kubelet[2054]: E1002 19:21:26.826449 2054 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:21:26.826574 kubelet[2054]: E1002 19:21:26.826470 2054 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:21:26.824000 audit[2054]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d22030 a1=c0007e6e88 a2=c000d22000 a3=25 items=0 ppid=1 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.824000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:26.826893 kubelet[2054]: E1002 19:21:26.826676 2054 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-2ed8b7e9a3.178a60a894bc0811", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-2ed8b7e9a3", UID:"ci-3510.3.0-a-2ed8b7e9a3", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-2ed8b7e9a3"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 21, 26, 824536081, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 21, 26, 824536081, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-2ed8b7e9a3"}': 'Post "https://10.200.8.18:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.18:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:21:26.827039 kubelet[2054]: I1002 19:21:26.827026 2054 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:21:26.825000 audit[2054]: AVC avc: denied { mac_admin } for pid=2054 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.825000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:26.825000 audit[2054]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007dd2c0 a1=c0007e6ea0 a2=c000d220c0 a3=25 items=0 ppid=1 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.825000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:26.827498 kubelet[2054]: I1002 19:21:26.827484 2054 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:21:26.827692 kubelet[2054]: I1002 19:21:26.827681 2054 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:21:26.827981 kubelet[2054]: I1002 19:21:26.827706 2054 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:21:26.828518 kubelet[2054]: I1002 19:21:26.828493 2054 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:21:26.831097 kubelet[2054]: I1002 19:21:26.827748 2054 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:21:26.831285 kubelet[2054]: I1002 19:21:26.831267 2054 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:21:26.832944 kubelet[2054]: I1002 19:21:26.832526 2054 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:21:26.832944 kubelet[2054]: I1002 19:21:26.832650 2054 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:21:26.832944 kubelet[2054]: I1002 19:21:26.832714 2054 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:21:26.833112 kubelet[2054]: W1002 19:21:26.832991 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.833112 kubelet[2054]: E1002 19:21:26.833032 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.833648 kubelet[2054]: E1002 19:21:26.833620 2054 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2ed8b7e9a3?timeout=10s\": dial tcp 10.200.8.18:6443: connect: connection refused" interval="200ms" Oct 2 19:21:26.833000 audit[2064]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.833000 audit[2064]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffeec1a7bb0 a2=0 a3=7ffeec1a7b9c items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:21:26.834000 audit[2065]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.834000 audit[2065]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5d8fd770 a2=0 a3=7fff5d8fd75c items=0 ppid=2054 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.834000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:21:26.845000 audit[2069]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.845000 audit[2069]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc2271b870 a2=0 a3=7ffc2271b85c items=0 ppid=2054 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:21:26.847000 audit[2071]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.847000 audit[2071]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd14663550 a2=0 a3=7ffd1466353c items=0 ppid=2054 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.847000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:21:26.882082 kubelet[2054]: I1002 19:21:26.882061 2054 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:21:26.882206 kubelet[2054]: I1002 19:21:26.882198 2054 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:21:26.882279 kubelet[2054]: I1002 19:21:26.882272 2054 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:26.888000 audit[2076]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.888000 audit[2076]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc8edb7b70 a2=0 a3=7ffc8edb7b5c items=0 ppid=2054 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.888000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:21:26.890295 kubelet[2054]: I1002 19:21:26.890261 2054 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:21:26.890000 audit[2077]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2077 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:26.890000 audit[2077]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe9753a290 a2=0 a3=7ffe9753a27c items=0 ppid=2054 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.890000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:21:26.892438 kubelet[2054]: I1002 19:21:26.892421 2054 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:21:26.892510 kubelet[2054]: I1002 19:21:26.892450 2054 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:21:26.892510 kubelet[2054]: I1002 19:21:26.892470 2054 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:21:26.892587 kubelet[2054]: E1002 19:21:26.892517 2054 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:21:26.893144 kubelet[2054]: W1002 19:21:26.893117 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.893223 kubelet[2054]: E1002 19:21:26.893155 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:26.893311 kubelet[2054]: I1002 19:21:26.893294 2054 policy_none.go:49] "None policy: Start" Oct 2 19:21:26.894060 kubelet[2054]: I1002 19:21:26.894041 2054 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:21:26.894137 kubelet[2054]: I1002 19:21:26.894073 2054 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:21:26.893000 audit[2078]: NETFILTER_CFG table=mangle:36 family=2 entries=1 op=nft_register_chain pid=2078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.893000 audit[2078]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff0a77aec0 a2=0 a3=7fff0a77aeac items=0 ppid=2054 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.893000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:21:26.893000 audit[2080]: NETFILTER_CFG table=mangle:37 family=10 entries=1 op=nft_register_chain pid=2080 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:26.893000 audit[2080]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6018ec90 a2=0 a3=7ffe6018ec7c items=0 ppid=2054 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:21:26.894000 audit[2082]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.894000 audit[2082]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc920ff800 a2=0 a3=7ffc920ff7ec items=0 ppid=2054 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.894000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:21:26.895000 audit[2081]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2081 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:26.895000 audit[2081]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff43198ef0 a2=0 a3=7fff43198edc items=0 ppid=2054 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.895000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:21:26.896000 audit[2083]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:26.896000 audit[2083]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffddf571010 a2=0 a3=7ffddf570ffc items=0 ppid=2054 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.896000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:21:26.897000 audit[2084]: NETFILTER_CFG table=filter:41 family=10 entries=2 op=nft_register_chain pid=2084 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:26.897000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffb6017f80 a2=0 a3=7fffb6017f6c items=0 ppid=2054 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.897000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:21:26.901842 systemd[1]: Created slice kubepods.slice. Oct 2 19:21:26.905910 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:21:26.908900 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:21:26.914188 kubelet[2054]: I1002 19:21:26.914174 2054 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:21:26.912000 audit[2054]: AVC avc: denied { mac_admin } for pid=2054 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:26.912000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:26.912000 audit[2054]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007d9350 a1=c0006dd380 a2=c0007d9320 a3=25 items=0 ppid=1 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:26.912000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:26.914914 kubelet[2054]: I1002 19:21:26.914900 2054 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:21:26.915240 kubelet[2054]: I1002 19:21:26.915225 2054 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:21:26.916348 kubelet[2054]: E1002 19:21:26.916333 2054 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-2ed8b7e9a3\" not found" Oct 2 19:21:26.934613 kubelet[2054]: I1002 19:21:26.934596 2054 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:26.934903 kubelet[2054]: E1002 19:21:26.934886 2054 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:26.993294 kubelet[2054]: I1002 19:21:26.993225 2054 topology_manager.go:215] "Topology Admit Handler" podUID="b7e1aa598369c06e5e913615cfd9bf22" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:26.995165 kubelet[2054]: I1002 19:21:26.995131 2054 topology_manager.go:215] "Topology Admit Handler" podUID="66d668c1d6cb19f92299386a803e9293" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:26.996809 kubelet[2054]: I1002 19:21:26.996790 2054 topology_manager.go:215] "Topology Admit Handler" podUID="a59dbf656f79acd366c3bf3bc02e615a" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.004132 systemd[1]: Created slice kubepods-burstable-podb7e1aa598369c06e5e913615cfd9bf22.slice. Oct 2 19:21:27.019414 systemd[1]: Created slice kubepods-burstable-poda59dbf656f79acd366c3bf3bc02e615a.slice. Oct 2 19:21:27.025631 systemd[1]: Created slice kubepods-burstable-pod66d668c1d6cb19f92299386a803e9293.slice. Oct 2 19:21:27.034051 kubelet[2054]: E1002 19:21:27.034016 2054 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2ed8b7e9a3?timeout=10s\": dial tcp 10.200.8.18:6443: connect: connection refused" interval="400ms" Oct 2 19:21:27.134931 kubelet[2054]: I1002 19:21:27.134426 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b7e1aa598369c06e5e913615cfd9bf22-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"b7e1aa598369c06e5e913615cfd9bf22\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.134931 kubelet[2054]: I1002 19:21:27.134485 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.134931 kubelet[2054]: I1002 19:21:27.134519 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.134931 kubelet[2054]: I1002 19:21:27.134553 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.134931 kubelet[2054]: I1002 19:21:27.134587 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a59dbf656f79acd366c3bf3bc02e615a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"a59dbf656f79acd366c3bf3bc02e615a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.135303 kubelet[2054]: I1002 19:21:27.134617 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b7e1aa598369c06e5e913615cfd9bf22-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"b7e1aa598369c06e5e913615cfd9bf22\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.135303 kubelet[2054]: I1002 19:21:27.134654 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b7e1aa598369c06e5e913615cfd9bf22-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"b7e1aa598369c06e5e913615cfd9bf22\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.135303 kubelet[2054]: I1002 19:21:27.134707 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.135303 kubelet[2054]: I1002 19:21:27.134746 2054 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.137463 kubelet[2054]: I1002 19:21:27.137446 2054 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.138054 kubelet[2054]: E1002 19:21:27.138037 2054 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.319148 env[1304]: time="2023-10-02T19:21:27.319093962Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3,Uid:b7e1aa598369c06e5e913615cfd9bf22,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:27.325606 env[1304]: time="2023-10-02T19:21:27.325570981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3,Uid:a59dbf656f79acd366c3bf3bc02e615a,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:27.328809 env[1304]: time="2023-10-02T19:21:27.328775740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3,Uid:66d668c1d6cb19f92299386a803e9293,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:27.435794 kubelet[2054]: E1002 19:21:27.435455 2054 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2ed8b7e9a3?timeout=10s\": dial tcp 10.200.8.18:6443: connect: connection refused" interval="800ms" Oct 2 19:21:27.539940 kubelet[2054]: I1002 19:21:27.539908 2054 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.540200 kubelet[2054]: E1002 19:21:27.540182 2054 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:27.684467 kubelet[2054]: W1002 19:21:27.684409 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2ed8b7e9a3&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:27.684843 kubelet[2054]: E1002 19:21:27.684475 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2ed8b7e9a3&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:27.718270 kubelet[2054]: W1002 19:21:27.718177 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:27.718270 kubelet[2054]: E1002 19:21:27.718211 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:27.924748 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount760902091.mount: Deactivated successfully. Oct 2 19:21:27.949969 env[1304]: time="2023-10-02T19:21:27.949920176Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:27.964870 env[1304]: time="2023-10-02T19:21:27.964783950Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:27.968512 env[1304]: time="2023-10-02T19:21:27.968425517Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:27.972369 env[1304]: time="2023-10-02T19:21:27.972339989Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:27.979903 env[1304]: time="2023-10-02T19:21:27.979871527Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:27.984366 env[1304]: time="2023-10-02T19:21:27.984329810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:27.988320 env[1304]: time="2023-10-02T19:21:27.988287882Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:27.996611 env[1304]: time="2023-10-02T19:21:27.996578335Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:28.001387 env[1304]: time="2023-10-02T19:21:28.001354523Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:28.003776 env[1304]: time="2023-10-02T19:21:28.003747266Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:28.014496 env[1304]: time="2023-10-02T19:21:28.014460359Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:28.020147 kubelet[2054]: W1002 19:21:28.020091 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:28.020222 kubelet[2054]: E1002 19:21:28.020157 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:28.027462 env[1304]: time="2023-10-02T19:21:28.027429592Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:28.079497 env[1304]: time="2023-10-02T19:21:28.079435328Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:28.079747 env[1304]: time="2023-10-02T19:21:28.079475229Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:28.079747 env[1304]: time="2023-10-02T19:21:28.079489529Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:28.079747 env[1304]: time="2023-10-02T19:21:28.079614731Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/04976690603f2c70eaaddfc9eb2fd559fdb1f2f638b689e6955e03962ad04f60 pid=2093 runtime=io.containerd.runc.v2 Oct 2 19:21:28.095468 systemd[1]: Started cri-containerd-04976690603f2c70eaaddfc9eb2fd559fdb1f2f638b689e6955e03962ad04f60.scope. Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.116000 audit: BPF prog-id=68 op=LOAD Oct 2 19:21:28.117000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.117000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2093 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034393736363930363033663263373065616164646663396562326664 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2093 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034393736363930363033663263373065616164646663396562326664 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.118000 audit: BPF prog-id=69 op=LOAD Oct 2 19:21:28.118000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001d0a30 items=0 ppid=2093 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034393736363930363033663263373065616164646663396562326664 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.119000 audit: BPF prog-id=70 op=LOAD Oct 2 19:21:28.119000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001d0a78 items=0 ppid=2093 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034393736363930363033663263373065616164646663396562326664 Oct 2 19:21:28.119000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:21:28.119000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.120000 audit: BPF prog-id=71 op=LOAD Oct 2 19:21:28.120000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001d0e88 items=0 ppid=2093 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034393736363930363033663263373065616164646663396562326664 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.124855945Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.124925747Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.124954947Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.125113150Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5237e33c316c01d56c8c434d49f6dc8c06026fa0ae5b7cf9f8f8dce66624f485 pid=2137 runtime=io.containerd.runc.v2 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.127614795Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.127687596Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.127716797Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:28.130695 env[1304]: time="2023-10-02T19:21:28.127871700Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/66d462544a565d57529a59c68abad41c81125f8ffd7a28be44961650c1f6f8c0 pid=2127 runtime=io.containerd.runc.v2 Oct 2 19:21:28.159234 env[1304]: time="2023-10-02T19:21:28.159193363Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3,Uid:b7e1aa598369c06e5e913615cfd9bf22,Namespace:kube-system,Attempt:0,} returns sandbox id \"04976690603f2c70eaaddfc9eb2fd559fdb1f2f638b689e6955e03962ad04f60\"" Oct 2 19:21:28.164374 env[1304]: time="2023-10-02T19:21:28.164327756Z" level=info msg="CreateContainer within sandbox \"04976690603f2c70eaaddfc9eb2fd559fdb1f2f638b689e6955e03962ad04f60\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:21:28.172156 systemd[1]: Started cri-containerd-5237e33c316c01d56c8c434d49f6dc8c06026fa0ae5b7cf9f8f8dce66624f485.scope. Oct 2 19:21:28.176881 systemd[1]: Started cri-containerd-66d462544a565d57529a59c68abad41c81125f8ffd7a28be44961650c1f6f8c0.scope. Oct 2 19:21:28.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit: BPF prog-id=72 op=LOAD Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2127 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643436323534346135363564353735323961353963363861626164 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2127 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643436323534346135363564353735323961353963363861626164 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit: BPF prog-id=73 op=LOAD Oct 2 19:21:28.186000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002186a0 items=0 ppid=2127 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643436323534346135363564353735323961353963363861626164 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit: BPF prog-id=74 op=LOAD Oct 2 19:21:28.186000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002186e8 items=0 ppid=2127 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643436323534346135363564353735323961353963363861626164 Oct 2 19:21:28.186000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:21:28.186000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.186000 audit: BPF prog-id=75 op=LOAD Oct 2 19:21:28.186000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000218af8 items=0 ppid=2127 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643436323534346135363564353735323961353963363861626164 Oct 2 19:21:28.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit: BPF prog-id=76 op=LOAD Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2137 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333765333363333136633031643536633863343334643439663664 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2137 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333765333363333136633031643536633863343334643439663664 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit: BPF prog-id=77 op=LOAD Oct 2 19:21:28.205000 audit[2152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002e53d0 items=0 ppid=2137 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333765333363333136633031643536633863343334643439663664 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit: BPF prog-id=78 op=LOAD Oct 2 19:21:28.205000 audit[2152]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002e5418 items=0 ppid=2137 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333765333363333136633031643536633863343334643439663664 Oct 2 19:21:28.205000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:21:28.205000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { perfmon } for pid=2152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit[2152]: AVC avc: denied { bpf } for pid=2152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.205000 audit: BPF prog-id=79 op=LOAD Oct 2 19:21:28.205000 audit[2152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002e5828 items=0 ppid=2137 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333765333363333136633031643536633863343334643439663664 Oct 2 19:21:28.227405 env[1304]: time="2023-10-02T19:21:28.227313089Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3,Uid:66d668c1d6cb19f92299386a803e9293,Namespace:kube-system,Attempt:0,} returns sandbox id \"66d462544a565d57529a59c68abad41c81125f8ffd7a28be44961650c1f6f8c0\"" Oct 2 19:21:28.231880 env[1304]: time="2023-10-02T19:21:28.231806770Z" level=info msg="CreateContainer within sandbox \"04976690603f2c70eaaddfc9eb2fd559fdb1f2f638b689e6955e03962ad04f60\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"481a7d8ea16dbeb40ebdd0d381a80974495543d702a3ed7df189f18ab862d1e2\"" Oct 2 19:21:28.232708 env[1304]: time="2023-10-02T19:21:28.232678985Z" level=info msg="StartContainer for \"481a7d8ea16dbeb40ebdd0d381a80974495543d702a3ed7df189f18ab862d1e2\"" Oct 2 19:21:28.233912 env[1304]: time="2023-10-02T19:21:28.233882107Z" level=info msg="CreateContainer within sandbox \"66d462544a565d57529a59c68abad41c81125f8ffd7a28be44961650c1f6f8c0\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:21:28.236880 kubelet[2054]: E1002 19:21:28.236840 2054 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2ed8b7e9a3?timeout=10s\": dial tcp 10.200.8.18:6443: connect: connection refused" interval="1.6s" Oct 2 19:21:28.263528 systemd[1]: Started cri-containerd-481a7d8ea16dbeb40ebdd0d381a80974495543d702a3ed7df189f18ab862d1e2.scope. Oct 2 19:21:28.269145 env[1304]: time="2023-10-02T19:21:28.268769535Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3,Uid:a59dbf656f79acd366c3bf3bc02e615a,Namespace:kube-system,Attempt:0,} returns sandbox id \"5237e33c316c01d56c8c434d49f6dc8c06026fa0ae5b7cf9f8f8dce66624f485\"" Oct 2 19:21:28.272107 env[1304]: time="2023-10-02T19:21:28.272069694Z" level=info msg="CreateContainer within sandbox \"5237e33c316c01d56c8c434d49f6dc8c06026fa0ae5b7cf9f8f8dce66624f485\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit: BPF prog-id=80 op=LOAD Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2093 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438316137643865613136646265623430656264643064333831613830 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2093 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438316137643865613136646265623430656264643064333831613830 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit: BPF prog-id=81 op=LOAD Oct 2 19:21:28.279000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000362ad0 items=0 ppid=2093 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438316137643865613136646265623430656264643064333831613830 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit: BPF prog-id=82 op=LOAD Oct 2 19:21:28.279000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000362b18 items=0 ppid=2093 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438316137643865613136646265623430656264643064333831613830 Oct 2 19:21:28.279000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:21:28.279000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.279000 audit: BPF prog-id=83 op=LOAD Oct 2 19:21:28.279000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000362f28 items=0 ppid=2093 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438316137643865613136646265623430656264643064333831613830 Oct 2 19:21:28.288604 env[1304]: time="2023-10-02T19:21:28.288571791Z" level=info msg="CreateContainer within sandbox \"66d462544a565d57529a59c68abad41c81125f8ffd7a28be44961650c1f6f8c0\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c3eb76939d21da1c3f25a516e379b7fc566aeed566ec3a84d0762188846b8409\"" Oct 2 19:21:28.289091 env[1304]: time="2023-10-02T19:21:28.289064400Z" level=info msg="StartContainer for \"c3eb76939d21da1c3f25a516e379b7fc566aeed566ec3a84d0762188846b8409\"" Oct 2 19:21:28.312164 systemd[1]: Started cri-containerd-c3eb76939d21da1c3f25a516e379b7fc566aeed566ec3a84d0762188846b8409.scope. Oct 2 19:21:28.315727 kubelet[2054]: W1002 19:21:28.313500 2054 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:28.315727 kubelet[2054]: E1002 19:21:28.313563 2054 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 19:21:28.332898 env[1304]: time="2023-10-02T19:21:28.332803287Z" level=info msg="CreateContainer within sandbox \"5237e33c316c01d56c8c434d49f6dc8c06026fa0ae5b7cf9f8f8dce66624f485\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"be3244dc49f4f3e8913c95864d605757357488e3c93d701e9bdbddd1d772341b\"" Oct 2 19:21:28.333408 env[1304]: time="2023-10-02T19:21:28.333376797Z" level=info msg="StartContainer for \"be3244dc49f4f3e8913c95864d605757357488e3c93d701e9bdbddd1d772341b\"" Oct 2 19:21:28.334859 env[1304]: time="2023-10-02T19:21:28.334830624Z" level=info msg="StartContainer for \"481a7d8ea16dbeb40ebdd0d381a80974495543d702a3ed7df189f18ab862d1e2\" returns successfully" Oct 2 19:21:28.346799 kubelet[2054]: I1002 19:21:28.346327 2054 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:28.346799 kubelet[2054]: E1002 19:21:28.346773 2054 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:28.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.348000 audit: BPF prog-id=84 op=LOAD Oct 2 19:21:28.349000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.349000 audit[2240]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2127 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333656237363933396432316461316333663235613531366533373962 Oct 2 19:21:28.349000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.349000 audit[2240]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2127 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333656237363933396432316461316333663235613531366533373962 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.350000 audit: BPF prog-id=85 op=LOAD Oct 2 19:21:28.350000 audit[2240]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024bc0 items=0 ppid=2127 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333656237363933396432316461316333663235613531366533373962 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.351000 audit: BPF prog-id=86 op=LOAD Oct 2 19:21:28.351000 audit[2240]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024c08 items=0 ppid=2127 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333656237363933396432316461316333663235613531366533373962 Oct 2 19:21:28.352000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:21:28.352000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.352000 audit: BPF prog-id=87 op=LOAD Oct 2 19:21:28.352000 audit[2240]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025018 items=0 ppid=2127 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333656237363933396432316461316333663235613531366533373962 Oct 2 19:21:28.366720 systemd[1]: Started cri-containerd-be3244dc49f4f3e8913c95864d605757357488e3c93d701e9bdbddd1d772341b.scope. Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.388000 audit: BPF prog-id=88 op=LOAD Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2137 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265333234346463343966346633653839313363393538363464363035 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2137 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265333234346463343966346633653839313363393538363464363035 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit: BPF prog-id=89 op=LOAD Oct 2 19:21:28.389000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003e6150 items=0 ppid=2137 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265333234346463343966346633653839313363393538363464363035 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit: BPF prog-id=90 op=LOAD Oct 2 19:21:28.389000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003e6198 items=0 ppid=2137 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265333234346463343966346633653839313363393538363464363035 Oct 2 19:21:28.389000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:21:28.389000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:28.389000 audit: BPF prog-id=91 op=LOAD Oct 2 19:21:28.389000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e65a8 items=0 ppid=2137 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:28.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265333234346463343966346633653839313363393538363464363035 Oct 2 19:21:28.426422 env[1304]: time="2023-10-02T19:21:28.426380871Z" level=info msg="StartContainer for \"c3eb76939d21da1c3f25a516e379b7fc566aeed566ec3a84d0762188846b8409\" returns successfully" Oct 2 19:21:28.462653 env[1304]: time="2023-10-02T19:21:28.462576322Z" level=info msg="StartContainer for \"be3244dc49f4f3e8913c95864d605757357488e3c93d701e9bdbddd1d772341b\" returns successfully" Oct 2 19:21:28.928434 systemd[1]: run-containerd-runc-k8s.io-04976690603f2c70eaaddfc9eb2fd559fdb1f2f638b689e6955e03962ad04f60-runc.O8YEJr.mount: Deactivated successfully. Oct 2 19:21:29.747000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:29.747000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006d8420 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:29.747000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:29.748000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:29.748000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000254920 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:29.748000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:29.949381 kubelet[2054]: I1002 19:21:29.949354 2054 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:30.226000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:30.226000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c00076be90 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:21:30.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:21:30.226000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4862 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:30.226000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c00076bf20 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:21:30.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:21:30.231000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:30.231000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c003289dd0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:21:30.231000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:21:30.236000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:30.236000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c006b4a2a0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:21:30.236000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:21:30.236000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:30.236000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c002d33ad0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:21:30.236000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:21:30.252000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:30.252000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c006169380 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:21:30.252000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:21:30.403656 kubelet[2054]: E1002 19:21:30.403614 2054 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-2ed8b7e9a3\" not found" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:30.455947 kubelet[2054]: I1002 19:21:30.455911 2054 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:30.486078 kubelet[2054]: E1002 19:21:30.485921 2054 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-2ed8b7e9a3.178a60a894bc0811", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-2ed8b7e9a3", UID:"ci-3510.3.0-a-2ed8b7e9a3", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-2ed8b7e9a3"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 21, 26, 824536081, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 21, 26, 824536081, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-2ed8b7e9a3"}': 'namespaces "default" not found' (will not retry!) Oct 2 19:21:30.824624 kubelet[2054]: I1002 19:21:30.824540 2054 apiserver.go:52] "Watching apiserver" Oct 2 19:21:30.833637 kubelet[2054]: I1002 19:21:30.833600 2054 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:21:32.455000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=4893 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:21:32.461030 kernel: kauditd_printk_skb: 581 callbacks suppressed Oct 2 19:21:32.461133 kernel: audit: type=1400 audit(1696274492.455:702): avc: denied { watch } for pid=2252 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=4893 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:21:32.455000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ef3d80 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:32.499517 kernel: audit: type=1300 audit(1696274492.455:702): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ef3d80 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:32.499598 kernel: audit: type=1327 audit(1696274492.455:702): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:32.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:33.212011 systemd[1]: Reloading. Oct 2 19:21:33.311890 /usr/lib/systemd/system-generators/torcx-generator[2338]: time="2023-10-02T19:21:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:21:33.311927 /usr/lib/systemd/system-generators/torcx-generator[2338]: time="2023-10-02T19:21:33Z" level=info msg="torcx already run" Oct 2 19:21:33.392994 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:21:33.393215 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:21:33.411102 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.521486 kernel: audit: type=1400 audit(1696274493.490:703): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.521587 kernel: audit: type=1400 audit(1696274493.490:704): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.535718 kernel: audit: type=1400 audit(1696274493.490:705): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.562245 kernel: audit: type=1400 audit(1696274493.490:706): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.562312 kernel: audit: type=1400 audit(1696274493.490:707): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.589851 kernel: audit: type=1400 audit(1696274493.490:708): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.589933 kernel: audit: type=1400 audit(1696274493.490:709): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit: BPF prog-id=92 op=LOAD Oct 2 19:21:33.534000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit: BPF prog-id=93 op=LOAD Oct 2 19:21:33.588000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.589000 audit: BPF prog-id=94 op=LOAD Oct 2 19:21:33.589000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit: BPF prog-id=95 op=LOAD Oct 2 19:21:33.591000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.591000 audit: BPF prog-id=96 op=LOAD Oct 2 19:21:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.592000 audit: BPF prog-id=97 op=LOAD Oct 2 19:21:33.592000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:21:33.592000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.594000 audit: BPF prog-id=98 op=LOAD Oct 2 19:21:33.594000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit: BPF prog-id=99 op=LOAD Oct 2 19:21:33.597000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.598000 audit: BPF prog-id=100 op=LOAD Oct 2 19:21:33.598000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit: BPF prog-id=101 op=LOAD Oct 2 19:21:33.599000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit: BPF prog-id=102 op=LOAD Oct 2 19:21:33.600000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit: BPF prog-id=103 op=LOAD Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit: BPF prog-id=104 op=LOAD Oct 2 19:21:33.600000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:21:33.600000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.601000 audit: BPF prog-id=105 op=LOAD Oct 2 19:21:33.601000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:21:33.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit: BPF prog-id=106 op=LOAD Oct 2 19:21:33.603000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit: BPF prog-id=107 op=LOAD Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.603000 audit: BPF prog-id=108 op=LOAD Oct 2 19:21:33.603000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:21:33.603000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.605000 audit: BPF prog-id=109 op=LOAD Oct 2 19:21:33.605000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.606000 audit: BPF prog-id=110 op=LOAD Oct 2 19:21:33.607000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit: BPF prog-id=111 op=LOAD Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.607000 audit: BPF prog-id=112 op=LOAD Oct 2 19:21:33.607000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:21:33.607000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:21:33.625394 systemd[1]: Stopping kubelet.service... Oct 2 19:21:33.625916 kubelet[2054]: I1002 19:21:33.625681 2054 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:21:33.645185 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:21:33.645389 systemd[1]: Stopped kubelet.service. Oct 2 19:21:33.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:33.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:33.647469 systemd[1]: Started kubelet.service. Oct 2 19:21:33.695000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:33.695000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ea4dc0 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:33.695000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:33.698000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:33.698000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ea4f00 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:33.698000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:33.700000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:33.700000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d795c0 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:33.700000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:33.706000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:33.706000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d79700 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:21:33.706000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:33.735051 kubelet[2401]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:33.735051 kubelet[2401]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:21:33.735051 kubelet[2401]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:33.735443 kubelet[2401]: I1002 19:21:33.735121 2401 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:21:33.741555 kubelet[2401]: I1002 19:21:33.741529 2401 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:21:33.741555 kubelet[2401]: I1002 19:21:33.741548 2401 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:21:33.741774 kubelet[2401]: I1002 19:21:33.741755 2401 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:21:33.744859 kubelet[2401]: I1002 19:21:33.744844 2401 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:21:33.746446 kubelet[2401]: I1002 19:21:33.746425 2401 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:21:33.752998 kubelet[2401]: I1002 19:21:33.752980 2401 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:21:33.753230 kubelet[2401]: I1002 19:21:33.753208 2401 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:21:33.753378 kubelet[2401]: I1002 19:21:33.753356 2401 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:21:33.753490 kubelet[2401]: I1002 19:21:33.753388 2401 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:21:33.753490 kubelet[2401]: I1002 19:21:33.753401 2401 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:21:33.753490 kubelet[2401]: I1002 19:21:33.753447 2401 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:33.753628 kubelet[2401]: I1002 19:21:33.753546 2401 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:21:33.755699 kubelet[2401]: I1002 19:21:33.755683 2401 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:21:33.755841 kubelet[2401]: I1002 19:21:33.755830 2401 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:21:33.755920 kubelet[2401]: I1002 19:21:33.755914 2401 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:21:33.765119 kubelet[2401]: I1002 19:21:33.765106 2401 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:21:33.766009 kubelet[2401]: I1002 19:21:33.765994 2401 server.go:1232] "Started kubelet" Oct 2 19:21:33.765000 audit[2401]: AVC avc: denied { mac_admin } for pid=2401 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.765000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:33.765000 audit[2401]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c7b740 a1=c000ca48a0 a2=c000c7b710 a3=25 items=0 ppid=1 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:33.765000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:33.768184 kubelet[2401]: I1002 19:21:33.767869 2401 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:21:33.766000 audit[2401]: AVC avc: denied { mac_admin } for pid=2401 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.766000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:33.768633 kubelet[2401]: I1002 19:21:33.767903 2401 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:21:33.769548 kubelet[2401]: I1002 19:21:33.769532 2401 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:21:33.770746 kubelet[2401]: I1002 19:21:33.767936 2401 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:21:33.770944 kubelet[2401]: I1002 19:21:33.770934 2401 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:21:33.771295 kubelet[2401]: E1002 19:21:33.771282 2401 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:21:33.771371 kubelet[2401]: E1002 19:21:33.771364 2401 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:21:33.766000 audit[2401]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00094e8e0 a1=c00045a648 a2=c000462e70 a3=25 items=0 ppid=1 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:33.773745 kubelet[2401]: I1002 19:21:33.773732 2401 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:21:33.773871 kubelet[2401]: I1002 19:21:33.773861 2401 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:21:33.766000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:33.783736 kubelet[2401]: I1002 19:21:33.781654 2401 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:21:33.783949 kubelet[2401]: I1002 19:21:33.783934 2401 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:21:33.784164 kubelet[2401]: I1002 19:21:33.784152 2401 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:21:33.809749 kubelet[2401]: I1002 19:21:33.809728 2401 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:21:33.811017 kubelet[2401]: I1002 19:21:33.811001 2401 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:21:33.811131 kubelet[2401]: I1002 19:21:33.811120 2401 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:21:33.811232 kubelet[2401]: I1002 19:21:33.811223 2401 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:21:33.811356 kubelet[2401]: E1002 19:21:33.811347 2401 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:21:33.877060 kubelet[2401]: I1002 19:21:33.877035 2401 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:21:33.877234 kubelet[2401]: I1002 19:21:33.877226 2401 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:21:33.877304 kubelet[2401]: I1002 19:21:33.877297 2401 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:33.877516 kubelet[2401]: I1002 19:21:33.877507 2401 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:21:33.877594 kubelet[2401]: I1002 19:21:33.877587 2401 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:21:33.877657 kubelet[2401]: I1002 19:21:33.877651 2401 policy_none.go:49] "None policy: Start" Oct 2 19:21:33.878460 kubelet[2401]: I1002 19:21:33.878443 2401 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:21:33.878580 kubelet[2401]: I1002 19:21:33.878572 2401 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:21:33.878784 kubelet[2401]: I1002 19:21:33.878774 2401 state_mem.go:75] "Updated machine memory state" Oct 2 19:21:33.890470 kubelet[2401]: I1002 19:21:33.890454 2401 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:21:33.888000 audit[2401]: AVC avc: denied { mac_admin } for pid=2401 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:33.888000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:33.888000 audit[2401]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b0dcb0 a1=c00103f9e0 a2=c000b0dc80 a3=25 items=0 ppid=1 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:33.888000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:33.890938 kubelet[2401]: I1002 19:21:33.890615 2401 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:21:33.892990 kubelet[2401]: I1002 19:21:33.892971 2401 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:21:33.912073 kubelet[2401]: I1002 19:21:33.912042 2401 topology_manager.go:215] "Topology Admit Handler" podUID="b7e1aa598369c06e5e913615cfd9bf22" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.912203 kubelet[2401]: I1002 19:21:33.912184 2401 topology_manager.go:215] "Topology Admit Handler" podUID="66d668c1d6cb19f92299386a803e9293" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.912261 kubelet[2401]: I1002 19:21:33.912252 2401 topology_manager.go:215] "Topology Admit Handler" podUID="a59dbf656f79acd366c3bf3bc02e615a" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.922926 kubelet[2401]: W1002 19:21:33.922898 2401 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:21:33.925367 kubelet[2401]: W1002 19:21:33.925348 2401 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:21:33.925653 kubelet[2401]: W1002 19:21:33.925630 2401 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:21:33.987104 kubelet[2401]: I1002 19:21:33.987071 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a59dbf656f79acd366c3bf3bc02e615a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"a59dbf656f79acd366c3bf3bc02e615a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.987414 kubelet[2401]: I1002 19:21:33.987399 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b7e1aa598369c06e5e913615cfd9bf22-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"b7e1aa598369c06e5e913615cfd9bf22\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.987579 kubelet[2401]: I1002 19:21:33.987569 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.987707 kubelet[2401]: I1002 19:21:33.987698 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.987823 kubelet[2401]: I1002 19:21:33.987815 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.987939 kubelet[2401]: I1002 19:21:33.987931 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.988066 kubelet[2401]: I1002 19:21:33.988058 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b7e1aa598369c06e5e913615cfd9bf22-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"b7e1aa598369c06e5e913615cfd9bf22\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.988184 kubelet[2401]: I1002 19:21:33.988176 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b7e1aa598369c06e5e913615cfd9bf22-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"b7e1aa598369c06e5e913615cfd9bf22\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.988305 kubelet[2401]: I1002 19:21:33.988295 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/66d668c1d6cb19f92299386a803e9293-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3\" (UID: \"66d668c1d6cb19f92299386a803e9293\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:33.999777 kubelet[2401]: I1002 19:21:33.999761 2401 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:34.037672 kubelet[2401]: I1002 19:21:34.037567 2401 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:34.037871 kubelet[2401]: I1002 19:21:34.037853 2401 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:34.762492 kubelet[2401]: I1002 19:21:34.762456 2401 apiserver.go:52] "Watching apiserver" Oct 2 19:21:34.784576 kubelet[2401]: I1002 19:21:34.784544 2401 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:21:34.850890 kubelet[2401]: W1002 19:21:34.850859 2401 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:21:34.851145 kubelet[2401]: E1002 19:21:34.851111 2401 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:21:34.883081 kubelet[2401]: I1002 19:21:34.883050 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-2ed8b7e9a3" podStartSLOduration=1.8830060610000001 podCreationTimestamp="2023-10-02 19:21:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:21:34.881905244 +0000 UTC m=+1.226000832" watchObservedRunningTime="2023-10-02 19:21:34.883006061 +0000 UTC m=+1.227101649" Oct 2 19:21:34.949610 kubelet[2401]: I1002 19:21:34.949582 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-2ed8b7e9a3" podStartSLOduration=1.949529709 podCreationTimestamp="2023-10-02 19:21:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:21:34.909460878 +0000 UTC m=+1.253556566" watchObservedRunningTime="2023-10-02 19:21:34.949529709 +0000 UTC m=+1.293625397" Oct 2 19:21:38.906863 sudo[1634]: pam_unix(sudo:session): session closed for user root Oct 2 19:21:38.906000 audit[1634]: USER_END pid=1634 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:38.911271 kernel: kauditd_printk_skb: 263 callbacks suppressed Oct 2 19:21:38.911355 kernel: audit: type=1106 audit(1696274498.906:956): pid=1634 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:38.911000 audit[1634]: CRED_DISP pid=1634 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:38.941855 kernel: audit: type=1104 audit(1696274498.911:957): pid=1634 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:39.012268 sshd[1631]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:39.013000 audit[1631]: USER_END pid=1631 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:39.015846 systemd[1]: sshd@6-10.200.8.18:22-10.200.12.6:46320.service: Deactivated successfully. Oct 2 19:21:39.016603 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:21:39.016779 systemd[1]: session-9.scope: Consumed 3.783s CPU time. Oct 2 19:21:39.017972 systemd-logind[1288]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:21:39.018999 systemd-logind[1288]: Removed session 9. Oct 2 19:21:39.013000 audit[1631]: CRED_DISP pid=1631 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:39.048895 kernel: audit: type=1106 audit(1696274499.013:958): pid=1631 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:39.048958 kernel: audit: type=1104 audit(1696274499.013:959): pid=1631 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:39.049011 kernel: audit: type=1131 audit(1696274499.013:960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.18:22-10.200.12.6:46320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:39.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.18:22-10.200.12.6:46320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:44.485360 kubelet[2401]: I1002 19:21:44.485314 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2ed8b7e9a3" podStartSLOduration=11.485275468 podCreationTimestamp="2023-10-02 19:21:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:21:34.952641158 +0000 UTC m=+1.296736846" watchObservedRunningTime="2023-10-02 19:21:44.485275468 +0000 UTC m=+10.829371156" Oct 2 19:21:45.365641 kubelet[2401]: I1002 19:21:45.365611 2401 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:21:45.366012 env[1304]: time="2023-10-02T19:21:45.365974592Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:21:45.366394 kubelet[2401]: I1002 19:21:45.366193 2401 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:21:46.229959 kubelet[2401]: I1002 19:21:46.229925 2401 topology_manager.go:215] "Topology Admit Handler" podUID="78abea3c-8d06-4900-aedd-0d96ba4ed61f" podNamespace="kube-system" podName="kube-proxy-wp59b" Oct 2 19:21:46.235715 systemd[1]: Created slice kubepods-besteffort-pod78abea3c_8d06_4900_aedd_0d96ba4ed61f.slice. Oct 2 19:21:46.265474 kubelet[2401]: I1002 19:21:46.265439 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/78abea3c-8d06-4900-aedd-0d96ba4ed61f-kube-proxy\") pod \"kube-proxy-wp59b\" (UID: \"78abea3c-8d06-4900-aedd-0d96ba4ed61f\") " pod="kube-system/kube-proxy-wp59b" Oct 2 19:21:46.265474 kubelet[2401]: I1002 19:21:46.265480 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/78abea3c-8d06-4900-aedd-0d96ba4ed61f-xtables-lock\") pod \"kube-proxy-wp59b\" (UID: \"78abea3c-8d06-4900-aedd-0d96ba4ed61f\") " pod="kube-system/kube-proxy-wp59b" Oct 2 19:21:46.265647 kubelet[2401]: I1002 19:21:46.265505 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/78abea3c-8d06-4900-aedd-0d96ba4ed61f-lib-modules\") pod \"kube-proxy-wp59b\" (UID: \"78abea3c-8d06-4900-aedd-0d96ba4ed61f\") " pod="kube-system/kube-proxy-wp59b" Oct 2 19:21:46.265647 kubelet[2401]: I1002 19:21:46.265533 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4hlvj\" (UniqueName: \"kubernetes.io/projected/78abea3c-8d06-4900-aedd-0d96ba4ed61f-kube-api-access-4hlvj\") pod \"kube-proxy-wp59b\" (UID: \"78abea3c-8d06-4900-aedd-0d96ba4ed61f\") " pod="kube-system/kube-proxy-wp59b" Oct 2 19:21:46.355926 kubelet[2401]: I1002 19:21:46.355880 2401 topology_manager.go:215] "Topology Admit Handler" podUID="f0681847-44be-410b-9853-a839bbd6b968" podNamespace="tigera-operator" podName="tigera-operator-8547bd6cc6-fr96j" Oct 2 19:21:46.362702 systemd[1]: Created slice kubepods-besteffort-podf0681847_44be_410b_9853_a839bbd6b968.slice. Oct 2 19:21:46.369281 kubelet[2401]: I1002 19:21:46.369231 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jp7q9\" (UniqueName: \"kubernetes.io/projected/f0681847-44be-410b-9853-a839bbd6b968-kube-api-access-jp7q9\") pod \"tigera-operator-8547bd6cc6-fr96j\" (UID: \"f0681847-44be-410b-9853-a839bbd6b968\") " pod="tigera-operator/tigera-operator-8547bd6cc6-fr96j" Oct 2 19:21:46.369403 kubelet[2401]: I1002 19:21:46.369341 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f0681847-44be-410b-9853-a839bbd6b968-var-lib-calico\") pod \"tigera-operator-8547bd6cc6-fr96j\" (UID: \"f0681847-44be-410b-9853-a839bbd6b968\") " pod="tigera-operator/tigera-operator-8547bd6cc6-fr96j" Oct 2 19:21:46.545131 env[1304]: time="2023-10-02T19:21:46.544999722Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wp59b,Uid:78abea3c-8d06-4900-aedd-0d96ba4ed61f,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:46.578621 env[1304]: time="2023-10-02T19:21:46.578555637Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:46.578621 env[1304]: time="2023-10-02T19:21:46.578591737Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:46.578833 env[1304]: time="2023-10-02T19:21:46.578605737Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:46.578992 env[1304]: time="2023-10-02T19:21:46.578927241Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d4e7e828f969202c01a5fd1b71ed7af681d37d40731cade2454257535343f441 pid=2483 runtime=io.containerd.runc.v2 Oct 2 19:21:46.600154 systemd[1]: Started cri-containerd-d4e7e828f969202c01a5fd1b71ed7af681d37d40731cade2454257535343f441.scope. Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639751 kernel: audit: type=1400 audit(1696274506.613:961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639886 kernel: audit: type=1400 audit(1696274506.613:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.653360 kernel: audit: type=1400 audit(1696274506.613:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.667742 kernel: audit: type=1400 audit(1696274506.613:964): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.681244 kernel: audit: type=1400 audit(1696274506.613:965): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.682776 env[1304]: time="2023-10-02T19:21:46.681775113Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-8547bd6cc6-fr96j,Uid:f0681847-44be-410b-9853-a839bbd6b968,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.707800 kernel: audit: type=1400 audit(1696274506.613:966): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.707873 kernel: audit: type=1400 audit(1696274506.613:967): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.708077 env[1304]: time="2023-10-02T19:21:46.708045538Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wp59b,Uid:78abea3c-8d06-4900-aedd-0d96ba4ed61f,Namespace:kube-system,Attempt:0,} returns sandbox id \"d4e7e828f969202c01a5fd1b71ed7af681d37d40731cade2454257535343f441\"" Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.712283 env[1304]: time="2023-10-02T19:21:46.712257090Z" level=info msg="CreateContainer within sandbox \"d4e7e828f969202c01a5fd1b71ed7af681d37d40731cade2454257535343f441\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:21:46.720953 kernel: audit: type=1400 audit(1696274506.613:968): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.734962 kernel: audit: type=1400 audit(1696274506.613:969): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.747669 kernel: audit: type=1400 audit(1696274506.613:970): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.748903 env[1304]: time="2023-10-02T19:21:46.744862893Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:46.748903 env[1304]: time="2023-10-02T19:21:46.744893494Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:46.748903 env[1304]: time="2023-10-02T19:21:46.744905594Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:46.748903 env[1304]: time="2023-10-02T19:21:46.745117797Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/de34a7f09cd6abb502ed2cb26252ce64347c64d14e8638fb0eeb15d9a3077252 pid=2522 runtime=io.containerd.runc.v2 Oct 2 19:21:46.613000 audit: BPF prog-id=113 op=LOAD Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2483 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653765383238663936393230326330316135666431623731656437 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2483 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653765383238663936393230326330316135666431623731656437 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.613000 audit: BPF prog-id=114 op=LOAD Oct 2 19:21:46.613000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002157e0 items=0 ppid=2483 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653765383238663936393230326330316135666431623731656437 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit: BPF prog-id=115 op=LOAD Oct 2 19:21:46.639000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000215828 items=0 ppid=2483 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653765383238663936393230326330316135666431623731656437 Oct 2 19:21:46.639000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:21:46.639000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.639000 audit: BPF prog-id=116 op=LOAD Oct 2 19:21:46.639000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000215c38 items=0 ppid=2483 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653765383238663936393230326330316135666431623731656437 Oct 2 19:21:46.763509 systemd[1]: Started cri-containerd-de34a7f09cd6abb502ed2cb26252ce64347c64d14e8638fb0eeb15d9a3077252.scope. Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.777000 audit: BPF prog-id=117 op=LOAD Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=2522 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465333461376630396364366162623530326564326362323632353263 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=2522 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465333461376630396364366162623530326564326362323632353263 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit: BPF prog-id=118 op=LOAD Oct 2 19:21:46.778000 audit[2533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c00028a6d0 items=0 ppid=2522 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465333461376630396364366162623530326564326362323632353263 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit: BPF prog-id=119 op=LOAD Oct 2 19:21:46.778000 audit[2533]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c00028a718 items=0 ppid=2522 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465333461376630396364366162623530326564326362323632353263 Oct 2 19:21:46.778000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:21:46.778000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { perfmon } for pid=2533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit[2533]: AVC avc: denied { bpf } for pid=2533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.778000 audit: BPF prog-id=120 op=LOAD Oct 2 19:21:46.778000 audit[2533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c00028ab28 items=0 ppid=2522 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465333461376630396364366162623530326564326362323632353263 Oct 2 19:21:46.809175 env[1304]: time="2023-10-02T19:21:46.808842485Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-8547bd6cc6-fr96j,Uid:f0681847-44be-410b-9853-a839bbd6b968,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"de34a7f09cd6abb502ed2cb26252ce64347c64d14e8638fb0eeb15d9a3077252\"" Oct 2 19:21:46.812016 env[1304]: time="2023-10-02T19:21:46.810307003Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:21:46.814552 env[1304]: time="2023-10-02T19:21:46.814487954Z" level=info msg="CreateContainer within sandbox \"d4e7e828f969202c01a5fd1b71ed7af681d37d40731cade2454257535343f441\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"558e82b11cb06381ac22bf49be0e2c7d0a22025a08c708479e37678b90dc1dd7\"" Oct 2 19:21:46.816302 env[1304]: time="2023-10-02T19:21:46.815049861Z" level=info msg="StartContainer for \"558e82b11cb06381ac22bf49be0e2c7d0a22025a08c708479e37678b90dc1dd7\"" Oct 2 19:21:46.832537 systemd[1]: Started cri-containerd-558e82b11cb06381ac22bf49be0e2c7d0a22025a08c708479e37678b90dc1dd7.scope. Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2483 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386538326231316362303633383161633232626634396265306532 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.849000 audit: BPF prog-id=121 op=LOAD Oct 2 19:21:46.849000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002a8200 items=0 ppid=2483 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386538326231316362303633383161633232626634396265306532 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit: BPF prog-id=122 op=LOAD Oct 2 19:21:46.850000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002a8248 items=0 ppid=2483 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386538326231316362303633383161633232626634396265306532 Oct 2 19:21:46.850000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:21:46.850000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:46.850000 audit: BPF prog-id=123 op=LOAD Oct 2 19:21:46.850000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002a82d8 items=0 ppid=2483 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386538326231316362303633383161633232626634396265306532 Oct 2 19:21:46.873505 env[1304]: time="2023-10-02T19:21:46.873454584Z" level=info msg="StartContainer for \"558e82b11cb06381ac22bf49be0e2c7d0a22025a08c708479e37678b90dc1dd7\" returns successfully" Oct 2 19:21:46.924000 audit[2614]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2614 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:46.924000 audit[2614]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8f192e90 a2=0 a3=7ffd8f192e7c items=0 ppid=2574 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.924000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:21:46.927000 audit[2616]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2616 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:46.927000 audit[2616]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd03346710 a2=0 a3=7ffd033466fc items=0 ppid=2574 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:21:46.928000 audit[2617]: NETFILTER_CFG table=filter:44 family=10 entries=1 op=nft_register_chain pid=2617 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:46.928000 audit[2617]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf300dd00 a2=0 a3=7ffcf300dcec items=0 ppid=2574 pid=2617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.928000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:21:46.930000 audit[2615]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:46.930000 audit[2615]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe3a3d7be0 a2=0 a3=7ffe3a3d7bcc items=0 ppid=2574 pid=2615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.930000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:21:46.931000 audit[2618]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_register_chain pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:46.931000 audit[2618]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8c8a1cf0 a2=0 a3=7ffd8c8a1cdc items=0 ppid=2574 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:21:46.932000 audit[2619]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:46.932000 audit[2619]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff6a1ddb20 a2=0 a3=7fff6a1ddb0c items=0 ppid=2574 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.932000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:21:47.026000 audit[2620]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.026000 audit[2620]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc3e11e400 a2=0 a3=7ffc3e11e3ec items=0 ppid=2574 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.026000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:21:47.029000 audit[2622]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.029000 audit[2622]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdc5e0f010 a2=0 a3=7ffdc5e0effc items=0 ppid=2574 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.029000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:21:47.034000 audit[2625]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.034000 audit[2625]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe113b1630 a2=0 a3=7ffe113b161c items=0 ppid=2574 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.034000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:21:47.035000 audit[2626]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.035000 audit[2626]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd3b32bc0 a2=0 a3=7ffcd3b32bac items=0 ppid=2574 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.035000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:21:47.038000 audit[2628]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.038000 audit[2628]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffbbdac240 a2=0 a3=7fffbbdac22c items=0 ppid=2574 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.038000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:21:47.039000 audit[2629]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.039000 audit[2629]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe69f2e900 a2=0 a3=7ffe69f2e8ec items=0 ppid=2574 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.039000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:21:47.041000 audit[2631]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.041000 audit[2631]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc170466e0 a2=0 a3=7ffc170466cc items=0 ppid=2574 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:21:47.045000 audit[2634]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.045000 audit[2634]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc5e4922b0 a2=0 a3=7ffc5e49229c items=0 ppid=2574 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.045000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:21:47.046000 audit[2635]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.046000 audit[2635]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc892fa910 a2=0 a3=7ffc892fa8fc items=0 ppid=2574 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.046000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:21:47.049000 audit[2637]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.049000 audit[2637]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff78efa4e0 a2=0 a3=7fff78efa4cc items=0 ppid=2574 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.049000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:21:47.050000 audit[2638]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.050000 audit[2638]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe86c7eb70 a2=0 a3=7ffe86c7eb5c items=0 ppid=2574 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.050000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:21:47.052000 audit[2640]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.052000 audit[2640]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcbc179ff0 a2=0 a3=7ffcbc179fdc items=0 ppid=2574 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:21:47.056000 audit[2643]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.056000 audit[2643]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc30d177e0 a2=0 a3=7ffc30d177cc items=0 ppid=2574 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:21:47.060000 audit[2646]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.060000 audit[2646]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe24684f40 a2=0 a3=7ffe24684f2c items=0 ppid=2574 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.060000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:21:47.063000 audit[2647]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.063000 audit[2647]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd13019610 a2=0 a3=7ffd130195fc items=0 ppid=2574 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:21:47.065000 audit[2649]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.065000 audit[2649]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd5b956350 a2=0 a3=7ffd5b95633c items=0 ppid=2574 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.065000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:47.069000 audit[2652]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.069000 audit[2652]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff5a53ad80 a2=0 a3=7fff5a53ad6c items=0 ppid=2574 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.069000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:47.071000 audit[2653]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2653 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.071000 audit[2653]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfd1b7de0 a2=0 a3=7ffcfd1b7dcc items=0 ppid=2574 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:21:47.075000 audit[2655]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:47.075000 audit[2655]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc1bcc85d0 a2=0 a3=7ffc1bcc85bc items=0 ppid=2574 pid=2655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.075000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:21:47.165000 audit[2661]: NETFILTER_CFG table=filter:67 family=2 entries=8 op=nft_register_rule pid=2661 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:47.165000 audit[2661]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffe04264620 a2=0 a3=7ffe0426460c items=0 ppid=2574 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.165000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:47.175000 audit[2661]: NETFILTER_CFG table=nat:68 family=2 entries=14 op=nft_register_chain pid=2661 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:47.175000 audit[2661]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffe04264620 a2=0 a3=7ffe0426460c items=0 ppid=2574 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.175000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:47.176000 audit[2666]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.176000 audit[2666]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc0bcff740 a2=0 a3=7ffc0bcff72c items=0 ppid=2574 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:21:47.179000 audit[2668]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2668 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.179000 audit[2668]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd52f77c20 a2=0 a3=7ffd52f77c0c items=0 ppid=2574 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:21:47.183000 audit[2671]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2671 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.183000 audit[2671]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe141495a0 a2=0 a3=7ffe1414958c items=0 ppid=2574 pid=2671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:21:47.184000 audit[2672]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2672 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.184000 audit[2672]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe21d85c90 a2=0 a3=7ffe21d85c7c items=0 ppid=2574 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:21:47.186000 audit[2674]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2674 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.186000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff39f234c0 a2=0 a3=7fff39f234ac items=0 ppid=2574 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:21:47.188000 audit[2675]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.188000 audit[2675]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff577cc030 a2=0 a3=7fff577cc01c items=0 ppid=2574 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:21:47.190000 audit[2677]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2677 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.190000 audit[2677]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdc44ca6f0 a2=0 a3=7ffdc44ca6dc items=0 ppid=2574 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:21:47.194000 audit[2680]: NETFILTER_CFG table=filter:76 family=10 entries=2 op=nft_register_chain pid=2680 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.194000 audit[2680]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff72431d30 a2=0 a3=7fff72431d1c items=0 ppid=2574 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.194000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:21:47.195000 audit[2681]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2681 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.195000 audit[2681]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd36953ee0 a2=0 a3=7ffd36953ecc items=0 ppid=2574 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:21:47.197000 audit[2683]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2683 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.197000 audit[2683]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff38435240 a2=0 a3=7fff3843522c items=0 ppid=2574 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.197000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:21:47.198000 audit[2684]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2684 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.198000 audit[2684]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdac4e4d50 a2=0 a3=7ffdac4e4d3c items=0 ppid=2574 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.198000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:21:47.201000 audit[2686]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2686 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.201000 audit[2686]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc413d09e0 a2=0 a3=7ffc413d09cc items=0 ppid=2574 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.201000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:21:47.204000 audit[2689]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2689 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.204000 audit[2689]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcb9411e50 a2=0 a3=7ffcb9411e3c items=0 ppid=2574 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.204000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:21:47.208000 audit[2692]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2692 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.208000 audit[2692]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd12f87ed0 a2=0 a3=7ffd12f87ebc items=0 ppid=2574 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.208000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:21:47.209000 audit[2693]: NETFILTER_CFG table=nat:83 family=10 entries=1 op=nft_register_chain pid=2693 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.209000 audit[2693]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcee07fb20 a2=0 a3=7ffcee07fb0c items=0 ppid=2574 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.209000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:21:47.211000 audit[2695]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2695 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.211000 audit[2695]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff0c131e50 a2=0 a3=7fff0c131e3c items=0 ppid=2574 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.211000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:47.215000 audit[2698]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2698 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.215000 audit[2698]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffff89a8ca0 a2=0 a3=7ffff89a8c8c items=0 ppid=2574 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.215000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:47.216000 audit[2699]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.216000 audit[2699]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff583c29f0 a2=0 a3=7fff583c29dc items=0 ppid=2574 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:21:47.220000 audit[2701]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.220000 audit[2701]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffeee86d0c0 a2=0 a3=7ffeee86d0ac items=0 ppid=2574 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.220000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:21:47.221000 audit[2702]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.221000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeef30dfd0 a2=0 a3=7ffeef30dfbc items=0 ppid=2574 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.221000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:21:47.223000 audit[2704]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2704 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.223000 audit[2704]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff7b15c5c0 a2=0 a3=7fff7b15c5ac items=0 ppid=2574 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.223000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:21:47.227000 audit[2707]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:47.227000 audit[2707]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff07c8b780 a2=0 a3=7fff07c8b76c items=0 ppid=2574 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:21:47.229000 audit[2709]: NETFILTER_CFG table=filter:91 family=10 entries=3 op=nft_register_rule pid=2709 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:21:47.229000 audit[2709]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffee52165f0 a2=0 a3=7ffee52165dc items=0 ppid=2574 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.229000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:47.230000 audit[2709]: NETFILTER_CFG table=nat:92 family=10 entries=7 op=nft_register_chain pid=2709 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:21:47.230000 audit[2709]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffee52165f0 a2=0 a3=7ffee52165dc items=0 ppid=2574 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.230000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:47.873979 kubelet[2401]: I1002 19:21:47.873753 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-wp59b" podStartSLOduration=1.873697154 podCreationTimestamp="2023-10-02 19:21:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:21:47.873534752 +0000 UTC m=+14.217630340" watchObservedRunningTime="2023-10-02 19:21:47.873697154 +0000 UTC m=+14.217792842" Oct 2 19:21:48.172215 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1466354420.mount: Deactivated successfully. Oct 2 19:21:49.541637 env[1304]: time="2023-10-02T19:21:49.541577044Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.555028 env[1304]: time="2023-10-02T19:21:49.554988001Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.560014 env[1304]: time="2023-10-02T19:21:49.559982659Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.565496 env[1304]: time="2023-10-02T19:21:49.565464923Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.566128 env[1304]: time="2023-10-02T19:21:49.566096231Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:21:49.569886 env[1304]: time="2023-10-02T19:21:49.569855175Z" level=info msg="CreateContainer within sandbox \"de34a7f09cd6abb502ed2cb26252ce64347c64d14e8638fb0eeb15d9a3077252\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:21:49.595208 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2217125385.mount: Deactivated successfully. Oct 2 19:21:49.601994 env[1304]: time="2023-10-02T19:21:49.601959751Z" level=info msg="CreateContainer within sandbox \"de34a7f09cd6abb502ed2cb26252ce64347c64d14e8638fb0eeb15d9a3077252\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"11fa37a85d0d846a45ace520a1e64c01f8db9111a168c7f96d1910c62b325964\"" Oct 2 19:21:49.602878 env[1304]: time="2023-10-02T19:21:49.602854661Z" level=info msg="StartContainer for \"11fa37a85d0d846a45ace520a1e64c01f8db9111a168c7f96d1910c62b325964\"" Oct 2 19:21:49.625880 systemd[1]: Started cri-containerd-11fa37a85d0d846a45ace520a1e64c01f8db9111a168c7f96d1910c62b325964.scope. Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit: BPF prog-id=124 op=LOAD Oct 2 19:21:49.640000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[2718]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2522 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666133376138356430643834366134356163653532306131653634 Oct 2 19:21:49.640000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.640000 audit[2718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2522 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666133376138356430643834366134356163653532306131653634 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit: BPF prog-id=125 op=LOAD Oct 2 19:21:49.641000 audit[2718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003709b0 items=0 ppid=2522 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666133376138356430643834366134356163653532306131653634 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit: BPF prog-id=126 op=LOAD Oct 2 19:21:49.641000 audit[2718]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003709f8 items=0 ppid=2522 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666133376138356430643834366134356163653532306131653634 Oct 2 19:21:49.641000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:21:49.641000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.641000 audit: BPF prog-id=127 op=LOAD Oct 2 19:21:49.641000 audit[2718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000370e08 items=0 ppid=2522 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666133376138356430643834366134356163653532306131653634 Oct 2 19:21:49.661389 env[1304]: time="2023-10-02T19:21:49.661337245Z" level=info msg="StartContainer for \"11fa37a85d0d846a45ace520a1e64c01f8db9111a168c7f96d1910c62b325964\" returns successfully" Oct 2 19:21:49.876315 kubelet[2401]: I1002 19:21:49.876198 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-8547bd6cc6-fr96j" podStartSLOduration=1.119592623 podCreationTimestamp="2023-10-02 19:21:46 +0000 UTC" firstStartedPulling="2023-10-02 19:21:46.809887598 +0000 UTC m=+13.153983186" lastFinishedPulling="2023-10-02 19:21:49.566450035 +0000 UTC m=+15.910545623" observedRunningTime="2023-10-02 19:21:49.875990658 +0000 UTC m=+16.220086346" watchObservedRunningTime="2023-10-02 19:21:49.87615506 +0000 UTC m=+16.220250648" Oct 2 19:21:51.505000 audit[2748]: NETFILTER_CFG table=filter:93 family=2 entries=15 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:51.505000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffc4a098880 a2=0 a3=7ffc4a09886c items=0 ppid=2574 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:51.505000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:51.507000 audit[2748]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:51.507000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc4a098880 a2=0 a3=31030 items=0 ppid=2574 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:51.507000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:51.515000 audit[2750]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=2750 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:51.515000 audit[2750]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffc1970daf0 a2=0 a3=7ffc1970dadc items=0 ppid=2574 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:51.515000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:51.516000 audit[2750]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2750 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:51.516000 audit[2750]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc1970daf0 a2=0 a3=31030 items=0 ppid=2574 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:51.516000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:51.763832 kubelet[2401]: I1002 19:21:51.763728 2401 topology_manager.go:215] "Topology Admit Handler" podUID="252920ce-d409-41cb-8f94-9c08249a514f" podNamespace="calico-system" podName="calico-typha-5c77b57cf4-q2v75" Oct 2 19:21:51.770753 systemd[1]: Created slice kubepods-besteffort-pod252920ce_d409_41cb_8f94_9c08249a514f.slice. Oct 2 19:21:51.779834 kubelet[2401]: W1002 19:21:51.779805 2401 reflector.go:535] object-"calico-system"/"typha-certs": failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.780045 kubelet[2401]: E1002 19:21:51.780030 2401 reflector.go:147] object-"calico-system"/"typha-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.780351 kubelet[2401]: W1002 19:21:51.780335 2401 reflector.go:535] object-"calico-system"/"tigera-ca-bundle": failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.780472 kubelet[2401]: E1002 19:21:51.780461 2401 reflector.go:147] object-"calico-system"/"tigera-ca-bundle": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.780746 kubelet[2401]: W1002 19:21:51.780727 2401 reflector.go:535] object-"calico-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.780841 kubelet[2401]: E1002 19:21:51.780752 2401 reflector.go:147] object-"calico-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.813937 kubelet[2401]: I1002 19:21:51.813557 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/252920ce-d409-41cb-8f94-9c08249a514f-tigera-ca-bundle\") pod \"calico-typha-5c77b57cf4-q2v75\" (UID: \"252920ce-d409-41cb-8f94-9c08249a514f\") " pod="calico-system/calico-typha-5c77b57cf4-q2v75" Oct 2 19:21:51.813937 kubelet[2401]: I1002 19:21:51.813604 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f6hs5\" (UniqueName: \"kubernetes.io/projected/252920ce-d409-41cb-8f94-9c08249a514f-kube-api-access-f6hs5\") pod \"calico-typha-5c77b57cf4-q2v75\" (UID: \"252920ce-d409-41cb-8f94-9c08249a514f\") " pod="calico-system/calico-typha-5c77b57cf4-q2v75" Oct 2 19:21:51.813937 kubelet[2401]: I1002 19:21:51.813631 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/252920ce-d409-41cb-8f94-9c08249a514f-typha-certs\") pod \"calico-typha-5c77b57cf4-q2v75\" (UID: \"252920ce-d409-41cb-8f94-9c08249a514f\") " pod="calico-system/calico-typha-5c77b57cf4-q2v75" Oct 2 19:21:51.861589 kubelet[2401]: I1002 19:21:51.861551 2401 topology_manager.go:215] "Topology Admit Handler" podUID="5c3f3be7-44ab-40c3-a9b8-5d0554973741" podNamespace="calico-system" podName="calico-node-nwt42" Oct 2 19:21:51.868602 systemd[1]: Created slice kubepods-besteffort-pod5c3f3be7_44ab_40c3_a9b8_5d0554973741.slice. Oct 2 19:21:51.875326 kubelet[2401]: W1002 19:21:51.875299 2401 reflector.go:535] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.875441 kubelet[2401]: E1002 19:21:51.875335 2401 reflector.go:147] object-"calico-system"/"cni-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.875561 kubelet[2401]: W1002 19:21:51.875547 2401 reflector.go:535] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.875648 kubelet[2401]: E1002 19:21:51.875638 2401 reflector.go:147] object-"calico-system"/"node-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:21:51.914476 kubelet[2401]: I1002 19:21:51.914437 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-xtables-lock\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914476 kubelet[2401]: I1002 19:21:51.914485 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-policysync\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914723 kubelet[2401]: I1002 19:21:51.914510 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/5c3f3be7-44ab-40c3-a9b8-5d0554973741-node-certs\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914723 kubelet[2401]: I1002 19:21:51.914549 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-cni-bin-dir\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914723 kubelet[2401]: I1002 19:21:51.914574 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-cni-log-dir\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914723 kubelet[2401]: I1002 19:21:51.914603 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-var-lib-calico\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914723 kubelet[2401]: I1002 19:21:51.914629 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-flexvol-driver-host\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914934 kubelet[2401]: I1002 19:21:51.914657 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z2vmp\" (UniqueName: \"kubernetes.io/projected/5c3f3be7-44ab-40c3-a9b8-5d0554973741-kube-api-access-z2vmp\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914934 kubelet[2401]: I1002 19:21:51.914716 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-cni-net-dir\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914934 kubelet[2401]: I1002 19:21:51.914746 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-var-run-calico\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914934 kubelet[2401]: I1002 19:21:51.914795 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5c3f3be7-44ab-40c3-a9b8-5d0554973741-lib-modules\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:51.914934 kubelet[2401]: I1002 19:21:51.914824 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5c3f3be7-44ab-40c3-a9b8-5d0554973741-tigera-ca-bundle\") pod \"calico-node-nwt42\" (UID: \"5c3f3be7-44ab-40c3-a9b8-5d0554973741\") " pod="calico-system/calico-node-nwt42" Oct 2 19:21:52.117212 kubelet[2401]: E1002 19:21:52.117179 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.117212 kubelet[2401]: W1002 19:21:52.117200 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.117428 kubelet[2401]: E1002 19:21:52.117235 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.117635 kubelet[2401]: E1002 19:21:52.117614 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.117635 kubelet[2401]: W1002 19:21:52.117632 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.117811 kubelet[2401]: E1002 19:21:52.117651 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.118687 kubelet[2401]: E1002 19:21:52.118652 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.118687 kubelet[2401]: W1002 19:21:52.118681 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.118834 kubelet[2401]: E1002 19:21:52.118702 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.118939 kubelet[2401]: E1002 19:21:52.118922 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.119010 kubelet[2401]: W1002 19:21:52.118939 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.119010 kubelet[2401]: E1002 19:21:52.118955 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.119164 kubelet[2401]: E1002 19:21:52.119146 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.119164 kubelet[2401]: W1002 19:21:52.119164 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.119263 kubelet[2401]: E1002 19:21:52.119179 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.119390 kubelet[2401]: E1002 19:21:52.119373 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.119390 kubelet[2401]: W1002 19:21:52.119388 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.119484 kubelet[2401]: E1002 19:21:52.119404 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.220457 kubelet[2401]: E1002 19:21:52.220426 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.220457 kubelet[2401]: W1002 19:21:52.220447 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.220700 kubelet[2401]: E1002 19:21:52.220470 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.220942 kubelet[2401]: E1002 19:21:52.220923 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.220942 kubelet[2401]: W1002 19:21:52.220937 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.221115 kubelet[2401]: E1002 19:21:52.220956 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.221353 kubelet[2401]: E1002 19:21:52.221336 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.221353 kubelet[2401]: W1002 19:21:52.221349 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.221485 kubelet[2401]: E1002 19:21:52.221366 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.221715 kubelet[2401]: E1002 19:21:52.221697 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.221715 kubelet[2401]: W1002 19:21:52.221713 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.221836 kubelet[2401]: E1002 19:21:52.221729 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.222057 kubelet[2401]: E1002 19:21:52.222041 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.222057 kubelet[2401]: W1002 19:21:52.222053 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.222232 kubelet[2401]: E1002 19:21:52.222071 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.222568 kubelet[2401]: E1002 19:21:52.222540 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.222568 kubelet[2401]: W1002 19:21:52.222558 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.222710 kubelet[2401]: E1002 19:21:52.222575 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.323288 kubelet[2401]: E1002 19:21:52.323250 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.323288 kubelet[2401]: W1002 19:21:52.323270 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.323518 kubelet[2401]: E1002 19:21:52.323331 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.323953 kubelet[2401]: E1002 19:21:52.323930 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.323953 kubelet[2401]: W1002 19:21:52.323950 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.324105 kubelet[2401]: E1002 19:21:52.323969 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.324317 kubelet[2401]: E1002 19:21:52.324297 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.324317 kubelet[2401]: W1002 19:21:52.324314 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.324488 kubelet[2401]: E1002 19:21:52.324347 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.324583 kubelet[2401]: E1002 19:21:52.324568 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.324583 kubelet[2401]: W1002 19:21:52.324583 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.324727 kubelet[2401]: E1002 19:21:52.324598 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.324891 kubelet[2401]: E1002 19:21:52.324875 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.324891 kubelet[2401]: W1002 19:21:52.324890 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.325010 kubelet[2401]: E1002 19:21:52.324906 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.325167 kubelet[2401]: E1002 19:21:52.325126 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.325236 kubelet[2401]: W1002 19:21:52.325170 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.325236 kubelet[2401]: E1002 19:21:52.325188 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.425878 kubelet[2401]: E1002 19:21:52.425772 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.425878 kubelet[2401]: W1002 19:21:52.425791 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.425878 kubelet[2401]: E1002 19:21:52.425818 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.426154 kubelet[2401]: E1002 19:21:52.426059 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.426154 kubelet[2401]: W1002 19:21:52.426070 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.426154 kubelet[2401]: E1002 19:21:52.426085 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.426296 kubelet[2401]: E1002 19:21:52.426279 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.426296 kubelet[2401]: W1002 19:21:52.426287 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.426382 kubelet[2401]: E1002 19:21:52.426301 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.428690 kubelet[2401]: E1002 19:21:52.426479 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.428690 kubelet[2401]: W1002 19:21:52.426491 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.428690 kubelet[2401]: E1002 19:21:52.426518 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.428690 kubelet[2401]: E1002 19:21:52.426718 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.428690 kubelet[2401]: W1002 19:21:52.426727 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.428690 kubelet[2401]: E1002 19:21:52.426741 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.428690 kubelet[2401]: E1002 19:21:52.426913 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.428690 kubelet[2401]: W1002 19:21:52.426920 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.428690 kubelet[2401]: E1002 19:21:52.426932 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.527798 kubelet[2401]: E1002 19:21:52.527757 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.528059 kubelet[2401]: W1002 19:21:52.528025 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.528173 kubelet[2401]: E1002 19:21:52.528159 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.528517 kubelet[2401]: E1002 19:21:52.528500 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.528627 kubelet[2401]: W1002 19:21:52.528613 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.528761 kubelet[2401]: E1002 19:21:52.528748 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.529055 kubelet[2401]: E1002 19:21:52.529040 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.529165 kubelet[2401]: W1002 19:21:52.529151 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.529246 kubelet[2401]: E1002 19:21:52.529236 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.538685 kernel: kauditd_printk_skb: 369 callbacks suppressed Oct 2 19:21:52.538765 kernel: audit: type=1325 audit(1696274512.528:1076): table=filter:97 family=2 entries=16 op=nft_register_rule pid=2776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:52.528000 audit[2776]: NETFILTER_CFG table=filter:97 family=2 entries=16 op=nft_register_rule pid=2776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:52.538906 kubelet[2401]: E1002 19:21:52.538896 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.538977 kubelet[2401]: W1002 19:21:52.538966 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.539034 kubelet[2401]: E1002 19:21:52.539027 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.528000 audit[2776]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffdd5c2f910 a2=0 a3=7ffdd5c2f8fc items=0 ppid=2574 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.543939 kubelet[2401]: E1002 19:21:52.543929 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.544009 kubelet[2401]: W1002 19:21:52.544000 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.544065 kubelet[2401]: E1002 19:21:52.544058 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.546786 kubelet[2401]: E1002 19:21:52.546774 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.546863 kubelet[2401]: W1002 19:21:52.546854 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.546918 kubelet[2401]: E1002 19:21:52.546911 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.563657 kernel: audit: type=1300 audit(1696274512.528:1076): arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffdd5c2f910 a2=0 a3=7ffdd5c2f8fc items=0 ppid=2574 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.528000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:52.529000 audit[2776]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:52.584606 kernel: audit: type=1327 audit(1696274512.528:1076): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:52.584679 kernel: audit: type=1325 audit(1696274512.529:1077): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:52.529000 audit[2776]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffdd5c2f910 a2=0 a3=31030 items=0 ppid=2574 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.529000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:52.614393 kernel: audit: type=1300 audit(1696274512.529:1077): arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffdd5c2f910 a2=0 a3=31030 items=0 ppid=2574 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.614463 kernel: audit: type=1327 audit(1696274512.529:1077): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:52.647843 kubelet[2401]: E1002 19:21:52.647817 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.647843 kubelet[2401]: W1002 19:21:52.647837 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.648044 kubelet[2401]: E1002 19:21:52.647862 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.648161 kubelet[2401]: E1002 19:21:52.648138 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.648161 kubelet[2401]: W1002 19:21:52.648156 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.648305 kubelet[2401]: E1002 19:21:52.648177 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.648501 kubelet[2401]: E1002 19:21:52.648487 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.648501 kubelet[2401]: W1002 19:21:52.648499 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.648608 kubelet[2401]: E1002 19:21:52.648515 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.648780 kubelet[2401]: E1002 19:21:52.648765 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.648780 kubelet[2401]: W1002 19:21:52.648777 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.648916 kubelet[2401]: E1002 19:21:52.648792 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.649020 kubelet[2401]: E1002 19:21:52.649005 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.649020 kubelet[2401]: W1002 19:21:52.649016 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.649135 kubelet[2401]: E1002 19:21:52.649031 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.649226 kubelet[2401]: E1002 19:21:52.649206 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.649226 kubelet[2401]: W1002 19:21:52.649218 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.649305 kubelet[2401]: E1002 19:21:52.649232 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.744017 kubelet[2401]: E1002 19:21:52.743936 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.744206 kubelet[2401]: W1002 19:21:52.744189 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.744294 kubelet[2401]: E1002 19:21:52.744282 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.750261 kubelet[2401]: E1002 19:21:52.750238 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.750261 kubelet[2401]: W1002 19:21:52.750253 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.750449 kubelet[2401]: E1002 19:21:52.750272 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.750497 kubelet[2401]: E1002 19:21:52.750490 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.750539 kubelet[2401]: W1002 19:21:52.750500 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.750539 kubelet[2401]: E1002 19:21:52.750515 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.750802 kubelet[2401]: E1002 19:21:52.750785 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.750802 kubelet[2401]: W1002 19:21:52.750798 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.750955 kubelet[2401]: E1002 19:21:52.750846 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.751320 kubelet[2401]: E1002 19:21:52.751044 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.751320 kubelet[2401]: W1002 19:21:52.751057 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.751320 kubelet[2401]: E1002 19:21:52.751072 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.751746 kubelet[2401]: E1002 19:21:52.751731 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.751855 kubelet[2401]: W1002 19:21:52.751842 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.751943 kubelet[2401]: E1002 19:21:52.751933 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.846851 kubelet[2401]: E1002 19:21:52.846816 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.846851 kubelet[2401]: W1002 19:21:52.846842 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.847212 kubelet[2401]: E1002 19:21:52.846863 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.847847 kubelet[2401]: E1002 19:21:52.847824 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.847847 kubelet[2401]: W1002 19:21:52.847839 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.847981 kubelet[2401]: E1002 19:21:52.847866 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.853161 kubelet[2401]: E1002 19:21:52.853135 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.853161 kubelet[2401]: W1002 19:21:52.853150 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.853324 kubelet[2401]: E1002 19:21:52.853167 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.853377 kubelet[2401]: E1002 19:21:52.853355 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.853377 kubelet[2401]: W1002 19:21:52.853365 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.853461 kubelet[2401]: E1002 19:21:52.853380 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.853587 kubelet[2401]: E1002 19:21:52.853573 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.853587 kubelet[2401]: W1002 19:21:52.853586 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.853683 kubelet[2401]: E1002 19:21:52.853601 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.915669 kubelet[2401]: E1002 19:21:52.915631 2401 secret.go:194] Couldn't get secret calico-system/typha-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:21:52.915849 kubelet[2401]: E1002 19:21:52.915755 2401 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/252920ce-d409-41cb-8f94-9c08249a514f-typha-certs podName:252920ce-d409-41cb-8f94-9c08249a514f nodeName:}" failed. No retries permitted until 2023-10-02 19:21:53.415727367 +0000 UTC m=+19.759823055 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "typha-certs" (UniqueName: "kubernetes.io/secret/252920ce-d409-41cb-8f94-9c08249a514f-typha-certs") pod "calico-typha-5c77b57cf4-q2v75" (UID: "252920ce-d409-41cb-8f94-9c08249a514f") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:21:52.922764 kubelet[2401]: E1002 19:21:52.922732 2401 projected.go:292] Couldn't get configMap calico-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:21:52.922764 kubelet[2401]: E1002 19:21:52.922769 2401 projected.go:198] Error preparing data for projected volume kube-api-access-f6hs5 for pod calico-system/calico-typha-5c77b57cf4-q2v75: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:21:52.922942 kubelet[2401]: E1002 19:21:52.922844 2401 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/252920ce-d409-41cb-8f94-9c08249a514f-kube-api-access-f6hs5 podName:252920ce-d409-41cb-8f94-9c08249a514f nodeName:}" failed. No retries permitted until 2023-10-02 19:21:53.422827545 +0000 UTC m=+19.766923133 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-f6hs5" (UniqueName: "kubernetes.io/projected/252920ce-d409-41cb-8f94-9c08249a514f-kube-api-access-f6hs5") pod "calico-typha-5c77b57cf4-q2v75" (UID: "252920ce-d409-41cb-8f94-9c08249a514f") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:21:52.954770 kubelet[2401]: E1002 19:21:52.954749 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.954770 kubelet[2401]: W1002 19:21:52.954765 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.954956 kubelet[2401]: E1002 19:21:52.954788 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.955054 kubelet[2401]: E1002 19:21:52.955038 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.955054 kubelet[2401]: W1002 19:21:52.955052 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.955154 kubelet[2401]: E1002 19:21:52.955068 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:52.955264 kubelet[2401]: E1002 19:21:52.955250 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:52.955264 kubelet[2401]: W1002 19:21:52.955262 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:52.955348 kubelet[2401]: E1002 19:21:52.955277 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.034411 kubelet[2401]: E1002 19:21:53.031986 2401 projected.go:292] Couldn't get configMap calico-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:21:53.034411 kubelet[2401]: E1002 19:21:53.032022 2401 projected.go:198] Error preparing data for projected volume kube-api-access-z2vmp for pod calico-system/calico-node-nwt42: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:21:53.034411 kubelet[2401]: E1002 19:21:53.032085 2401 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/5c3f3be7-44ab-40c3-a9b8-5d0554973741-kube-api-access-z2vmp podName:5c3f3be7-44ab-40c3-a9b8-5d0554973741 nodeName:}" failed. No retries permitted until 2023-10-02 19:21:53.532063252 +0000 UTC m=+19.876158840 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-z2vmp" (UniqueName: "kubernetes.io/projected/5c3f3be7-44ab-40c3-a9b8-5d0554973741-kube-api-access-z2vmp") pod "calico-node-nwt42" (UID: "5c3f3be7-44ab-40c3-a9b8-5d0554973741") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:21:53.056237 kubelet[2401]: E1002 19:21:53.056212 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.056237 kubelet[2401]: W1002 19:21:53.056230 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.056424 kubelet[2401]: E1002 19:21:53.056259 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.056576 kubelet[2401]: E1002 19:21:53.056558 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.056576 kubelet[2401]: W1002 19:21:53.056572 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.056774 kubelet[2401]: E1002 19:21:53.056593 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.056868 kubelet[2401]: E1002 19:21:53.056851 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.056932 kubelet[2401]: W1002 19:21:53.056868 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.056932 kubelet[2401]: E1002 19:21:53.056888 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.157688 kubelet[2401]: E1002 19:21:53.157637 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.157688 kubelet[2401]: W1002 19:21:53.157685 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.157941 kubelet[2401]: E1002 19:21:53.157714 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.158033 kubelet[2401]: E1002 19:21:53.157993 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.158033 kubelet[2401]: W1002 19:21:53.158007 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.158033 kubelet[2401]: E1002 19:21:53.158028 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.158311 kubelet[2401]: E1002 19:21:53.158287 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.158311 kubelet[2401]: W1002 19:21:53.158305 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.158408 kubelet[2401]: E1002 19:21:53.158328 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.258785 kubelet[2401]: E1002 19:21:53.258756 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.258785 kubelet[2401]: W1002 19:21:53.258776 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.259040 kubelet[2401]: E1002 19:21:53.258799 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.259105 kubelet[2401]: E1002 19:21:53.259074 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.259105 kubelet[2401]: W1002 19:21:53.259087 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.259212 kubelet[2401]: E1002 19:21:53.259107 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.259382 kubelet[2401]: E1002 19:21:53.259362 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.259382 kubelet[2401]: W1002 19:21:53.259376 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.259519 kubelet[2401]: E1002 19:21:53.259396 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.360856 kubelet[2401]: E1002 19:21:53.360825 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.360856 kubelet[2401]: W1002 19:21:53.360849 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.361142 kubelet[2401]: E1002 19:21:53.360876 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.361238 kubelet[2401]: E1002 19:21:53.361162 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.361238 kubelet[2401]: W1002 19:21:53.361175 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.361238 kubelet[2401]: E1002 19:21:53.361194 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.361433 kubelet[2401]: E1002 19:21:53.361413 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.361433 kubelet[2401]: W1002 19:21:53.361424 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.361539 kubelet[2401]: E1002 19:21:53.361441 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.462791 kubelet[2401]: E1002 19:21:53.462757 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.462791 kubelet[2401]: W1002 19:21:53.462780 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.463064 kubelet[2401]: E1002 19:21:53.462808 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.463130 kubelet[2401]: E1002 19:21:53.463109 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.463130 kubelet[2401]: W1002 19:21:53.463121 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.463237 kubelet[2401]: E1002 19:21:53.463141 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.463378 kubelet[2401]: E1002 19:21:53.463355 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.463378 kubelet[2401]: W1002 19:21:53.463371 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.463531 kubelet[2401]: E1002 19:21:53.463390 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.463679 kubelet[2401]: E1002 19:21:53.463642 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.463679 kubelet[2401]: W1002 19:21:53.463656 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.463873 kubelet[2401]: E1002 19:21:53.463703 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.463981 kubelet[2401]: E1002 19:21:53.463963 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.463981 kubelet[2401]: W1002 19:21:53.463977 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.464105 kubelet[2401]: E1002 19:21:53.464001 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.464266 kubelet[2401]: E1002 19:21:53.464246 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.464266 kubelet[2401]: W1002 19:21:53.464261 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.464398 kubelet[2401]: E1002 19:21:53.464286 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.464584 kubelet[2401]: E1002 19:21:53.464564 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.464584 kubelet[2401]: W1002 19:21:53.464581 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.464739 kubelet[2401]: E1002 19:21:53.464607 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.465182 kubelet[2401]: E1002 19:21:53.465150 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.465311 kubelet[2401]: W1002 19:21:53.465294 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.465410 kubelet[2401]: E1002 19:21:53.465398 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.465785 kubelet[2401]: E1002 19:21:53.465767 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.465897 kubelet[2401]: W1002 19:21:53.465881 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.465993 kubelet[2401]: E1002 19:21:53.465982 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.466304 kubelet[2401]: E1002 19:21:53.466290 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.466413 kubelet[2401]: W1002 19:21:53.466399 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.466499 kubelet[2401]: E1002 19:21:53.466489 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.466891 kubelet[2401]: E1002 19:21:53.466872 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.467022 kubelet[2401]: W1002 19:21:53.467006 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.467109 kubelet[2401]: E1002 19:21:53.467099 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.474323 kubelet[2401]: E1002 19:21:53.474231 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.474323 kubelet[2401]: W1002 19:21:53.474246 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.474323 kubelet[2401]: E1002 19:21:53.474280 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.481222 kubelet[2401]: E1002 19:21:53.481188 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.481222 kubelet[2401]: W1002 19:21:53.481218 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.481315 kubelet[2401]: E1002 19:21:53.481234 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.564049 kubelet[2401]: E1002 19:21:53.564013 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.564049 kubelet[2401]: W1002 19:21:53.564035 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.564339 kubelet[2401]: E1002 19:21:53.564064 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.564405 kubelet[2401]: E1002 19:21:53.564366 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.564405 kubelet[2401]: W1002 19:21:53.564379 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.564405 kubelet[2401]: E1002 19:21:53.564404 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.564705 kubelet[2401]: E1002 19:21:53.564684 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.564705 kubelet[2401]: W1002 19:21:53.564700 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.565007 kubelet[2401]: E1002 19:21:53.564720 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.565007 kubelet[2401]: E1002 19:21:53.564949 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.565007 kubelet[2401]: W1002 19:21:53.564963 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.565007 kubelet[2401]: E1002 19:21:53.564985 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.565237 kubelet[2401]: E1002 19:21:53.565229 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.565292 kubelet[2401]: W1002 19:21:53.565239 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.565292 kubelet[2401]: E1002 19:21:53.565259 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.575211 env[1304]: time="2023-10-02T19:21:53.574713774Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5c77b57cf4-q2v75,Uid:252920ce-d409-41cb-8f94-9c08249a514f,Namespace:calico-system,Attempt:0,}" Oct 2 19:21:53.575488 kubelet[2401]: E1002 19:21:53.574968 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:53.575488 kubelet[2401]: W1002 19:21:53.574980 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:53.575488 kubelet[2401]: E1002 19:21:53.575010 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:53.615561 env[1304]: time="2023-10-02T19:21:53.615427418Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:53.615561 env[1304]: time="2023-10-02T19:21:53.615481818Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:53.617581 env[1304]: time="2023-10-02T19:21:53.615495519Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:53.617851 env[1304]: time="2023-10-02T19:21:53.617779944Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a191292e334b3f0a9382baeb0d127173776410f009d034a8069df75936c61af0 pid=2845 runtime=io.containerd.runc.v2 Oct 2 19:21:53.630798 systemd[1]: Started cri-containerd-a191292e334b3f0a9382baeb0d127173776410f009d034a8069df75936c61af0.scope. Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666708 kernel: audit: type=1400 audit(1696274513.651:1078): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.680048 kernel: audit: type=1400 audit(1696274513.651:1079): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.680413 env[1304]: time="2023-10-02T19:21:53.680371427Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-nwt42,Uid:5c3f3be7-44ab-40c3-a9b8-5d0554973741,Namespace:calico-system,Attempt:0,}" Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.708002 kernel: audit: type=1400 audit(1696274513.651:1080): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.708075 kernel: audit: type=1400 audit(1696274513.651:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.651000 audit: BPF prog-id=128 op=LOAD Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2845 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131393132393265333334623366306139333832626165623064313237 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2845 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131393132393265333334623366306139333832626165623064313237 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.652000 audit: BPF prog-id=129 op=LOAD Oct 2 19:21:53.652000 audit[2856]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003d2e60 items=0 ppid=2845 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131393132393265333334623366306139333832626165623064313237 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.665000 audit: BPF prog-id=130 op=LOAD Oct 2 19:21:53.665000 audit[2856]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003d2ea8 items=0 ppid=2845 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131393132393265333334623366306139333832626165623064313237 Oct 2 19:21:53.666000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:21:53.666000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { perfmon } for pid=2856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit[2856]: AVC avc: denied { bpf } for pid=2856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.666000 audit: BPF prog-id=131 op=LOAD Oct 2 19:21:53.666000 audit[2856]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003d32b8 items=0 ppid=2845 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131393132393265333334623366306139333832626165623064313237 Oct 2 19:21:53.731184 env[1304]: time="2023-10-02T19:21:53.731150581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5c77b57cf4-q2v75,Uid:252920ce-d409-41cb-8f94-9c08249a514f,Namespace:calico-system,Attempt:0,} returns sandbox id \"a191292e334b3f0a9382baeb0d127173776410f009d034a8069df75936c61af0\"" Oct 2 19:21:53.734347 env[1304]: time="2023-10-02T19:21:53.733355405Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:21:53.760762 env[1304]: time="2023-10-02T19:21:53.760583902Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:53.760762 env[1304]: time="2023-10-02T19:21:53.760614302Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:53.760762 env[1304]: time="2023-10-02T19:21:53.760624002Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:53.760996 env[1304]: time="2023-10-02T19:21:53.760766804Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f pid=2885 runtime=io.containerd.runc.v2 Oct 2 19:21:53.782837 systemd[1]: Started cri-containerd-c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f.scope. Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.795000 audit: BPF prog-id=132 op=LOAD Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2885 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331366463396561636138393764626364376431366338313130393038 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2885 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331366463396561636138393764626364376431366338313130393038 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit: BPF prog-id=133 op=LOAD Oct 2 19:21:53.796000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00035f160 items=0 ppid=2885 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331366463396561636138393764626364376431366338313130393038 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit: BPF prog-id=134 op=LOAD Oct 2 19:21:53.796000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00035f1a8 items=0 ppid=2885 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331366463396561636138393764626364376431366338313130393038 Oct 2 19:21:53.796000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:21:53.796000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:53.796000 audit: BPF prog-id=135 op=LOAD Oct 2 19:21:53.796000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00035f5b8 items=0 ppid=2885 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331366463396561636138393764626364376431366338313130393038 Oct 2 19:21:53.811377 env[1304]: time="2023-10-02T19:21:53.811338856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-nwt42,Uid:5c3f3be7-44ab-40c3-a9b8-5d0554973741,Namespace:calico-system,Attempt:0,} returns sandbox id \"c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f\"" Oct 2 19:21:54.742265 systemd[1]: run-containerd-runc-k8s.io-c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f-runc.rinqBG.mount: Deactivated successfully. Oct 2 19:21:55.776720 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount911973406.mount: Deactivated successfully. Oct 2 19:21:57.622037 env[1304]: time="2023-10-02T19:21:57.621989332Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:57.630235 env[1304]: time="2023-10-02T19:21:57.630197116Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:57.634444 env[1304]: time="2023-10-02T19:21:57.634409059Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:57.638493 env[1304]: time="2023-10-02T19:21:57.638463300Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:57.639221 env[1304]: time="2023-10-02T19:21:57.639191208Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:21:57.641700 env[1304]: time="2023-10-02T19:21:57.640973226Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:21:57.643107 env[1304]: time="2023-10-02T19:21:57.643063447Z" level=info msg="CreateContainer within sandbox \"a191292e334b3f0a9382baeb0d127173776410f009d034a8069df75936c61af0\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:21:57.686257 env[1304]: time="2023-10-02T19:21:57.686213888Z" level=info msg="CreateContainer within sandbox \"a191292e334b3f0a9382baeb0d127173776410f009d034a8069df75936c61af0\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"ef8f05ffea2636c8ac926b3d303cb40278638cdefa794ef838d749299029de5e\"" Oct 2 19:21:57.688372 env[1304]: time="2023-10-02T19:21:57.686879795Z" level=info msg="StartContainer for \"ef8f05ffea2636c8ac926b3d303cb40278638cdefa794ef838d749299029de5e\"" Oct 2 19:21:57.707853 systemd[1]: Started cri-containerd-ef8f05ffea2636c8ac926b3d303cb40278638cdefa794ef838d749299029de5e.scope. Oct 2 19:21:57.725709 kernel: kauditd_printk_skb: 110 callbacks suppressed Oct 2 19:21:57.725811 kernel: audit: type=1400 audit(1696274517.719:1114): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739899 kernel: audit: type=1400 audit(1696274517.719:1115): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.765334 kernel: audit: type=1400 audit(1696274517.719:1116): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.779227 kernel: audit: type=1400 audit(1696274517.719:1117): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.806943 kernel: audit: type=1400 audit(1696274517.719:1118): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.807031 kernel: audit: type=1400 audit(1696274517.719:1119): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.822907 kernel: audit: type=1400 audit(1696274517.719:1120): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.836751 kernel: audit: type=1400 audit(1696274517.719:1121): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.850678 kernel: audit: type=1400 audit(1696274517.719:1122): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.852293 env[1304]: time="2023-10-02T19:21:57.852217384Z" level=info msg="StartContainer for \"ef8f05ffea2636c8ac926b3d303cb40278638cdefa794ef838d749299029de5e\" returns successfully" Oct 2 19:21:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.866685 kernel: audit: type=1400 audit(1696274517.725:1123): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.725000 audit: BPF prog-id=136 op=LOAD Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2845 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:57.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386630356666656132363336633861633932366233643330336362 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2845 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:57.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386630356666656132363336633861633932366233643330336362 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.730000 audit: BPF prog-id=137 op=LOAD Oct 2 19:21:57.730000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000384330 items=0 ppid=2845 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:57.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386630356666656132363336633861633932366233643330336362 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.738000 audit: BPF prog-id=138 op=LOAD Oct 2 19:21:57.738000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000384378 items=0 ppid=2845 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:57.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386630356666656132363336633861633932366233643330336362 Oct 2 19:21:57.738000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:21:57.739000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:57.739000 audit: BPF prog-id=139 op=LOAD Oct 2 19:21:57.739000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000384788 items=0 ppid=2845 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:57.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386630356666656132363336633861633932366233643330336362 Oct 2 19:21:57.949280 kubelet[2401]: E1002 19:21:57.949172 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.949786 kubelet[2401]: W1002 19:21:57.949763 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.949902 kubelet[2401]: E1002 19:21:57.949892 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.950226 kubelet[2401]: E1002 19:21:57.950213 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.950331 kubelet[2401]: W1002 19:21:57.950319 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.950417 kubelet[2401]: E1002 19:21:57.950409 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.950983 kubelet[2401]: E1002 19:21:57.950944 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.951162 kubelet[2401]: W1002 19:21:57.951121 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.951290 kubelet[2401]: E1002 19:21:57.951281 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.951620 kubelet[2401]: E1002 19:21:57.951606 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.951758 kubelet[2401]: W1002 19:21:57.951745 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.951856 kubelet[2401]: E1002 19:21:57.951848 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.952146 kubelet[2401]: E1002 19:21:57.952134 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.952262 kubelet[2401]: W1002 19:21:57.952249 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.952355 kubelet[2401]: E1002 19:21:57.952345 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.952638 kubelet[2401]: E1002 19:21:57.952625 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.952759 kubelet[2401]: W1002 19:21:57.952747 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.952854 kubelet[2401]: E1002 19:21:57.952845 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.953124 kubelet[2401]: E1002 19:21:57.953111 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.953245 kubelet[2401]: W1002 19:21:57.953232 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.953330 kubelet[2401]: E1002 19:21:57.953320 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.953609 kubelet[2401]: E1002 19:21:57.953585 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.953762 kubelet[2401]: W1002 19:21:57.953748 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.953869 kubelet[2401]: E1002 19:21:57.953858 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.954308 kubelet[2401]: E1002 19:21:57.954295 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.954436 kubelet[2401]: W1002 19:21:57.954414 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.955071 kubelet[2401]: E1002 19:21:57.955054 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.955500 kubelet[2401]: E1002 19:21:57.955487 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.955594 kubelet[2401]: W1002 19:21:57.955583 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.955716 kubelet[2401]: E1002 19:21:57.955705 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.957177 kubelet[2401]: E1002 19:21:57.957144 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.957314 kubelet[2401]: W1002 19:21:57.957301 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.957399 kubelet[2401]: E1002 19:21:57.957390 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.958411 kubelet[2401]: E1002 19:21:57.958398 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.958520 kubelet[2401]: W1002 19:21:57.958508 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.958602 kubelet[2401]: E1002 19:21:57.958593 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.958959 kubelet[2401]: E1002 19:21:57.958946 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.959062 kubelet[2401]: W1002 19:21:57.959051 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.959140 kubelet[2401]: E1002 19:21:57.959131 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.959444 kubelet[2401]: E1002 19:21:57.959407 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.959553 kubelet[2401]: W1002 19:21:57.959540 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.959639 kubelet[2401]: E1002 19:21:57.959629 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:57.961200 kubelet[2401]: E1002 19:21:57.960982 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:57.961200 kubelet[2401]: W1002 19:21:57.960997 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:57.961200 kubelet[2401]: E1002 19:21:57.961014 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.008526 kubelet[2401]: E1002 19:21:58.008359 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.008526 kubelet[2401]: W1002 19:21:58.008375 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.008526 kubelet[2401]: E1002 19:21:58.008395 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.008841 kubelet[2401]: E1002 19:21:58.008624 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.008841 kubelet[2401]: W1002 19:21:58.008634 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.008841 kubelet[2401]: E1002 19:21:58.008652 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.008981 kubelet[2401]: E1002 19:21:58.008909 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.008981 kubelet[2401]: W1002 19:21:58.008929 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.008981 kubelet[2401]: E1002 19:21:58.008945 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.009273 kubelet[2401]: E1002 19:21:58.009255 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.009273 kubelet[2401]: W1002 19:21:58.009267 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.009441 kubelet[2401]: E1002 19:21:58.009292 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.009535 kubelet[2401]: E1002 19:21:58.009518 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.009535 kubelet[2401]: W1002 19:21:58.009531 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.009652 kubelet[2401]: E1002 19:21:58.009551 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.009773 kubelet[2401]: E1002 19:21:58.009756 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.009773 kubelet[2401]: W1002 19:21:58.009769 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.009946 kubelet[2401]: E1002 19:21:58.009788 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.010042 kubelet[2401]: E1002 19:21:58.010025 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.010042 kubelet[2401]: W1002 19:21:58.010036 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.010137 kubelet[2401]: E1002 19:21:58.010055 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.010398 kubelet[2401]: E1002 19:21:58.010380 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.010398 kubelet[2401]: W1002 19:21:58.010392 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.010520 kubelet[2401]: E1002 19:21:58.010486 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.010641 kubelet[2401]: E1002 19:21:58.010623 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.010641 kubelet[2401]: W1002 19:21:58.010635 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.010772 kubelet[2401]: E1002 19:21:58.010697 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.010892 kubelet[2401]: E1002 19:21:58.010874 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.010892 kubelet[2401]: W1002 19:21:58.010886 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.011000 kubelet[2401]: E1002 19:21:58.010908 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.011123 kubelet[2401]: E1002 19:21:58.011105 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.011123 kubelet[2401]: W1002 19:21:58.011119 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.011226 kubelet[2401]: E1002 19:21:58.011138 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.011339 kubelet[2401]: E1002 19:21:58.011323 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.011339 kubelet[2401]: W1002 19:21:58.011334 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.011448 kubelet[2401]: E1002 19:21:58.011353 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.011587 kubelet[2401]: E1002 19:21:58.011570 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.011587 kubelet[2401]: W1002 19:21:58.011581 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.011736 kubelet[2401]: E1002 19:21:58.011600 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.012139 kubelet[2401]: E1002 19:21:58.012121 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.012139 kubelet[2401]: W1002 19:21:58.012133 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.012281 kubelet[2401]: E1002 19:21:58.012222 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.012372 kubelet[2401]: E1002 19:21:58.012356 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.012372 kubelet[2401]: W1002 19:21:58.012367 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.012484 kubelet[2401]: E1002 19:21:58.012382 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.012565 kubelet[2401]: E1002 19:21:58.012550 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.012565 kubelet[2401]: W1002 19:21:58.012561 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.012685 kubelet[2401]: E1002 19:21:58.012575 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.012822 kubelet[2401]: E1002 19:21:58.012805 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.012822 kubelet[2401]: W1002 19:21:58.012817 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.012920 kubelet[2401]: E1002 19:21:58.012832 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.013219 kubelet[2401]: E1002 19:21:58.013201 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.013219 kubelet[2401]: W1002 19:21:58.013214 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.013311 kubelet[2401]: E1002 19:21:58.013229 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.903331 kubelet[2401]: I1002 19:21:58.903288 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-5c77b57cf4-q2v75" podStartSLOduration=3.996139459 podCreationTimestamp="2023-10-02 19:21:51 +0000 UTC" firstStartedPulling="2023-10-02 19:21:53.732439495 +0000 UTC m=+20.076535183" lastFinishedPulling="2023-10-02 19:21:57.639547011 +0000 UTC m=+23.983642599" observedRunningTime="2023-10-02 19:21:57.904517618 +0000 UTC m=+24.248613206" watchObservedRunningTime="2023-10-02 19:21:58.903246875 +0000 UTC m=+25.247342563" Oct 2 19:21:58.920000 audit[2997]: NETFILTER_CFG table=filter:99 family=2 entries=15 op=nft_register_rule pid=2997 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:58.920000 audit[2997]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffdcfb59f20 a2=0 a3=7ffdcfb59f0c items=0 ppid=2574 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:58.920000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:58.921000 audit[2997]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2997 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:58.921000 audit[2997]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffdcfb59f20 a2=0 a3=7ffdcfb59f0c items=0 ppid=2574 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:58.921000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:58.968887 kubelet[2401]: E1002 19:21:58.968856 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.968887 kubelet[2401]: W1002 19:21:58.968878 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.969394 kubelet[2401]: E1002 19:21:58.968903 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.969394 kubelet[2401]: E1002 19:21:58.969141 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.969394 kubelet[2401]: W1002 19:21:58.969160 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.969394 kubelet[2401]: E1002 19:21:58.969178 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.969394 kubelet[2401]: E1002 19:21:58.969345 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.969394 kubelet[2401]: W1002 19:21:58.969354 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.969394 kubelet[2401]: E1002 19:21:58.969370 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.969755 kubelet[2401]: E1002 19:21:58.969543 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.969755 kubelet[2401]: W1002 19:21:58.969552 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.969755 kubelet[2401]: E1002 19:21:58.969566 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.969902 kubelet[2401]: E1002 19:21:58.969792 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.969902 kubelet[2401]: W1002 19:21:58.969802 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.969902 kubelet[2401]: E1002 19:21:58.969819 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.970045 kubelet[2401]: E1002 19:21:58.969985 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.970045 kubelet[2401]: W1002 19:21:58.969994 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.970045 kubelet[2401]: E1002 19:21:58.970007 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.970187 kubelet[2401]: E1002 19:21:58.970161 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.970187 kubelet[2401]: W1002 19:21:58.970170 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.970187 kubelet[2401]: E1002 19:21:58.970183 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.970356 kubelet[2401]: E1002 19:21:58.970338 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.970356 kubelet[2401]: W1002 19:21:58.970352 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.970461 kubelet[2401]: E1002 19:21:58.970367 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.970584 kubelet[2401]: E1002 19:21:58.970568 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.970584 kubelet[2401]: W1002 19:21:58.970580 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.970760 kubelet[2401]: E1002 19:21:58.970596 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.970814 kubelet[2401]: E1002 19:21:58.970795 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.970814 kubelet[2401]: W1002 19:21:58.970804 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.970912 kubelet[2401]: E1002 19:21:58.970818 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.970997 kubelet[2401]: E1002 19:21:58.970983 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.970997 kubelet[2401]: W1002 19:21:58.970994 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.971118 kubelet[2401]: E1002 19:21:58.971008 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.971192 kubelet[2401]: E1002 19:21:58.971175 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.971192 kubelet[2401]: W1002 19:21:58.971188 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.971304 kubelet[2401]: E1002 19:21:58.971203 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.971385 kubelet[2401]: E1002 19:21:58.971369 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.971385 kubelet[2401]: W1002 19:21:58.971381 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.971507 kubelet[2401]: E1002 19:21:58.971396 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.971568 kubelet[2401]: E1002 19:21:58.971554 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.971623 kubelet[2401]: W1002 19:21:58.971569 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.971623 kubelet[2401]: E1002 19:21:58.971583 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:58.971775 kubelet[2401]: E1002 19:21:58.971758 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:58.971775 kubelet[2401]: W1002 19:21:58.971771 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:58.971863 kubelet[2401]: E1002 19:21:58.971787 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.016806 kubelet[2401]: E1002 19:21:59.016783 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.017007 kubelet[2401]: W1002 19:21:59.016990 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.017125 kubelet[2401]: E1002 19:21:59.017112 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.017550 kubelet[2401]: E1002 19:21:59.017533 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.017699 kubelet[2401]: W1002 19:21:59.017683 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.017827 kubelet[2401]: E1002 19:21:59.017814 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.018228 kubelet[2401]: E1002 19:21:59.018207 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.018228 kubelet[2401]: W1002 19:21:59.018222 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.018417 kubelet[2401]: E1002 19:21:59.018251 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.018548 kubelet[2401]: E1002 19:21:59.018530 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.018548 kubelet[2401]: W1002 19:21:59.018544 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.018756 kubelet[2401]: E1002 19:21:59.018569 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.018819 kubelet[2401]: E1002 19:21:59.018808 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.018880 kubelet[2401]: W1002 19:21:59.018820 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.018880 kubelet[2401]: E1002 19:21:59.018838 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.019098 kubelet[2401]: E1002 19:21:59.019078 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.019098 kubelet[2401]: W1002 19:21:59.019093 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.019239 kubelet[2401]: E1002 19:21:59.019117 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.019538 kubelet[2401]: E1002 19:21:59.019519 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.019538 kubelet[2401]: W1002 19:21:59.019533 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.019755 kubelet[2401]: E1002 19:21:59.019648 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.019844 kubelet[2401]: E1002 19:21:59.019832 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.019919 kubelet[2401]: W1002 19:21:59.019847 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.019977 kubelet[2401]: E1002 19:21:59.019954 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.020179 kubelet[2401]: E1002 19:21:59.020160 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.020179 kubelet[2401]: W1002 19:21:59.020174 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.020341 kubelet[2401]: E1002 19:21:59.020202 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.020444 kubelet[2401]: E1002 19:21:59.020418 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.020444 kubelet[2401]: W1002 19:21:59.020441 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.020579 kubelet[2401]: E1002 19:21:59.020456 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.020625 kubelet[2401]: E1002 19:21:59.020613 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.020625 kubelet[2401]: W1002 19:21:59.020622 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.020741 kubelet[2401]: E1002 19:21:59.020636 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.020882 kubelet[2401]: E1002 19:21:59.020866 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.020882 kubelet[2401]: W1002 19:21:59.020878 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.020993 kubelet[2401]: E1002 19:21:59.020898 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.021261 kubelet[2401]: E1002 19:21:59.021245 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.021261 kubelet[2401]: W1002 19:21:59.021257 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.021399 kubelet[2401]: E1002 19:21:59.021347 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.021489 kubelet[2401]: E1002 19:21:59.021473 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.021489 kubelet[2401]: W1002 19:21:59.021485 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.021611 kubelet[2401]: E1002 19:21:59.021500 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.021731 kubelet[2401]: E1002 19:21:59.021718 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.021731 kubelet[2401]: W1002 19:21:59.021729 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.021849 kubelet[2401]: E1002 19:21:59.021744 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.021908 kubelet[2401]: E1002 19:21:59.021899 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.021956 kubelet[2401]: W1002 19:21:59.021908 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.021956 kubelet[2401]: E1002 19:21:59.021924 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.022129 kubelet[2401]: E1002 19:21:59.022113 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.022129 kubelet[2401]: W1002 19:21:59.022125 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.022248 kubelet[2401]: E1002 19:21:59.022139 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.022597 kubelet[2401]: E1002 19:21:59.022582 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.022597 kubelet[2401]: W1002 19:21:59.022593 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.022721 kubelet[2401]: E1002 19:21:59.022608 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.411049 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1347915477.mount: Deactivated successfully. Oct 2 19:21:59.979161 kubelet[2401]: E1002 19:21:59.978540 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.979161 kubelet[2401]: W1002 19:21:59.978562 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.979161 kubelet[2401]: E1002 19:21:59.978588 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.979161 kubelet[2401]: E1002 19:21:59.978803 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.979161 kubelet[2401]: W1002 19:21:59.978815 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.979161 kubelet[2401]: E1002 19:21:59.978834 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.979161 kubelet[2401]: E1002 19:21:59.979001 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.979161 kubelet[2401]: W1002 19:21:59.979012 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.979161 kubelet[2401]: E1002 19:21:59.979025 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.980740 kubelet[2401]: E1002 19:21:59.979966 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.980740 kubelet[2401]: W1002 19:21:59.979980 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.980740 kubelet[2401]: E1002 19:21:59.979998 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.980740 kubelet[2401]: E1002 19:21:59.980249 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.980740 kubelet[2401]: W1002 19:21:59.980260 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.980740 kubelet[2401]: E1002 19:21:59.980276 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.980740 kubelet[2401]: E1002 19:21:59.980436 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.980740 kubelet[2401]: W1002 19:21:59.980443 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.980740 kubelet[2401]: E1002 19:21:59.980456 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.980740 kubelet[2401]: E1002 19:21:59.980628 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.981111 kubelet[2401]: W1002 19:21:59.980637 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.981111 kubelet[2401]: E1002 19:21:59.980652 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.981313 kubelet[2401]: E1002 19:21:59.981298 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.981313 kubelet[2401]: W1002 19:21:59.981310 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.981447 kubelet[2401]: E1002 19:21:59.981326 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.981537 kubelet[2401]: E1002 19:21:59.981524 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.981537 kubelet[2401]: W1002 19:21:59.981534 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.981675 kubelet[2401]: E1002 19:21:59.981550 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.981745 kubelet[2401]: E1002 19:21:59.981736 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.981793 kubelet[2401]: W1002 19:21:59.981746 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.981793 kubelet[2401]: E1002 19:21:59.981763 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.981958 kubelet[2401]: E1002 19:21:59.981938 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.981958 kubelet[2401]: W1002 19:21:59.981950 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.982087 kubelet[2401]: E1002 19:21:59.981964 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.982160 kubelet[2401]: E1002 19:21:59.982141 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.982160 kubelet[2401]: W1002 19:21:59.982154 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.982271 kubelet[2401]: E1002 19:21:59.982168 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.982355 kubelet[2401]: E1002 19:21:59.982341 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.982355 kubelet[2401]: W1002 19:21:59.982352 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.982460 kubelet[2401]: E1002 19:21:59.982367 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.982550 kubelet[2401]: E1002 19:21:59.982533 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.982550 kubelet[2401]: W1002 19:21:59.982545 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.982686 kubelet[2401]: E1002 19:21:59.982559 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:59.982775 kubelet[2401]: E1002 19:21:59.982758 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:59.982775 kubelet[2401]: W1002 19:21:59.982772 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:59.982851 kubelet[2401]: E1002 19:21:59.982787 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.025923 kubelet[2401]: E1002 19:22:00.025896 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.025923 kubelet[2401]: W1002 19:22:00.025913 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.026153 kubelet[2401]: E1002 19:22:00.025936 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.026276 kubelet[2401]: E1002 19:22:00.026257 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.026276 kubelet[2401]: W1002 19:22:00.026271 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.026418 kubelet[2401]: E1002 19:22:00.026293 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.026535 kubelet[2401]: E1002 19:22:00.026518 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.026535 kubelet[2401]: W1002 19:22:00.026535 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.026642 kubelet[2401]: E1002 19:22:00.026554 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.026840 kubelet[2401]: E1002 19:22:00.026819 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.026840 kubelet[2401]: W1002 19:22:00.026834 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.026990 kubelet[2401]: E1002 19:22:00.026855 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.027086 kubelet[2401]: E1002 19:22:00.027072 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.027086 kubelet[2401]: W1002 19:22:00.027083 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.027207 kubelet[2401]: E1002 19:22:00.027103 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.027320 kubelet[2401]: E1002 19:22:00.027305 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.027320 kubelet[2401]: W1002 19:22:00.027317 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.027486 kubelet[2401]: E1002 19:22:00.027473 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.027589 kubelet[2401]: E1002 19:22:00.027489 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.027589 kubelet[2401]: W1002 19:22:00.027587 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.027806 kubelet[2401]: E1002 19:22:00.027775 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.027806 kubelet[2401]: E1002 19:22:00.027786 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.027806 kubelet[2401]: W1002 19:22:00.027794 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.027975 kubelet[2401]: E1002 19:22:00.027894 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.028030 kubelet[2401]: E1002 19:22:00.028024 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.028073 kubelet[2401]: W1002 19:22:00.028035 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.028073 kubelet[2401]: E1002 19:22:00.028053 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.028437 kubelet[2401]: E1002 19:22:00.028418 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.028437 kubelet[2401]: W1002 19:22:00.028435 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.028576 kubelet[2401]: E1002 19:22:00.028455 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.028679 kubelet[2401]: E1002 19:22:00.028651 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.028765 kubelet[2401]: W1002 19:22:00.028683 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.028765 kubelet[2401]: E1002 19:22:00.028705 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.028918 kubelet[2401]: E1002 19:22:00.028902 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.028918 kubelet[2401]: W1002 19:22:00.028918 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.029016 kubelet[2401]: E1002 19:22:00.028936 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.029184 kubelet[2401]: E1002 19:22:00.029168 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.029184 kubelet[2401]: W1002 19:22:00.029184 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.029297 kubelet[2401]: E1002 19:22:00.029265 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.029617 kubelet[2401]: E1002 19:22:00.029599 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.029617 kubelet[2401]: W1002 19:22:00.029612 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.029799 kubelet[2401]: E1002 19:22:00.029634 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.029874 kubelet[2401]: E1002 19:22:00.029859 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.029932 kubelet[2401]: W1002 19:22:00.029876 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.029932 kubelet[2401]: E1002 19:22:00.029892 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.030131 kubelet[2401]: E1002 19:22:00.030115 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.030131 kubelet[2401]: W1002 19:22:00.030128 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.030253 kubelet[2401]: E1002 19:22:00.030148 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.030989 kubelet[2401]: E1002 19:22:00.030869 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.030989 kubelet[2401]: W1002 19:22:00.030940 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.030989 kubelet[2401]: E1002 19:22:00.030960 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.032220 kubelet[2401]: E1002 19:22:00.031144 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.032220 kubelet[2401]: W1002 19:22:00.031152 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.032220 kubelet[2401]: E1002 19:22:00.031162 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.990242 kubelet[2401]: E1002 19:22:00.988586 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.990242 kubelet[2401]: W1002 19:22:00.988609 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.990242 kubelet[2401]: E1002 19:22:00.988634 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.990242 kubelet[2401]: E1002 19:22:00.988867 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.990242 kubelet[2401]: W1002 19:22:00.988880 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.990242 kubelet[2401]: E1002 19:22:00.988899 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.990242 kubelet[2401]: E1002 19:22:00.989068 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.990242 kubelet[2401]: W1002 19:22:00.989077 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.990242 kubelet[2401]: E1002 19:22:00.989091 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.990242 kubelet[2401]: E1002 19:22:00.989253 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.991089 kubelet[2401]: W1002 19:22:00.989261 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.991089 kubelet[2401]: E1002 19:22:00.989275 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.991089 kubelet[2401]: E1002 19:22:00.989449 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.991089 kubelet[2401]: W1002 19:22:00.989459 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.991089 kubelet[2401]: E1002 19:22:00.989474 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.991089 kubelet[2401]: E1002 19:22:00.989639 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.991089 kubelet[2401]: W1002 19:22:00.989650 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.991089 kubelet[2401]: E1002 19:22:00.989678 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.991089 kubelet[2401]: E1002 19:22:00.989852 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.991089 kubelet[2401]: W1002 19:22:00.989860 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.991499 kubelet[2401]: E1002 19:22:00.989872 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.991499 kubelet[2401]: E1002 19:22:00.990038 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.991499 kubelet[2401]: W1002 19:22:00.990048 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.991499 kubelet[2401]: E1002 19:22:00.990062 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.992881 kubelet[2401]: E1002 19:22:00.991753 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.992881 kubelet[2401]: W1002 19:22:00.991775 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.992881 kubelet[2401]: E1002 19:22:00.991792 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.992881 kubelet[2401]: E1002 19:22:00.991965 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.992881 kubelet[2401]: W1002 19:22:00.991973 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.992881 kubelet[2401]: E1002 19:22:00.991986 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.992881 kubelet[2401]: E1002 19:22:00.992130 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.992881 kubelet[2401]: W1002 19:22:00.992136 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.992881 kubelet[2401]: E1002 19:22:00.992149 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.992881 kubelet[2401]: E1002 19:22:00.992286 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.993328 kubelet[2401]: W1002 19:22:00.992293 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.993328 kubelet[2401]: E1002 19:22:00.992306 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.993328 kubelet[2401]: E1002 19:22:00.992454 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.993328 kubelet[2401]: W1002 19:22:00.992461 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.993328 kubelet[2401]: E1002 19:22:00.992473 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.993328 kubelet[2401]: E1002 19:22:00.992613 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.993328 kubelet[2401]: W1002 19:22:00.992620 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.993328 kubelet[2401]: E1002 19:22:00.992634 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:00.993328 kubelet[2401]: E1002 19:22:00.992813 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:00.993328 kubelet[2401]: W1002 19:22:00.992820 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:00.993740 kubelet[2401]: E1002 19:22:00.992834 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.031509 kubelet[2401]: E1002 19:22:01.031221 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.031509 kubelet[2401]: W1002 19:22:01.031242 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.031509 kubelet[2401]: E1002 19:22:01.031267 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.031785 kubelet[2401]: E1002 19:22:01.031595 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.031785 kubelet[2401]: W1002 19:22:01.031606 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.031785 kubelet[2401]: E1002 19:22:01.031629 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.031949 kubelet[2401]: E1002 19:22:01.031896 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.031949 kubelet[2401]: W1002 19:22:01.031907 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.031949 kubelet[2401]: E1002 19:22:01.031927 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.032145 kubelet[2401]: E1002 19:22:01.032131 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.032207 kubelet[2401]: W1002 19:22:01.032145 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.032207 kubelet[2401]: E1002 19:22:01.032166 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.032364 kubelet[2401]: E1002 19:22:01.032351 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.032414 kubelet[2401]: W1002 19:22:01.032364 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.032414 kubelet[2401]: E1002 19:22:01.032381 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.032607 kubelet[2401]: E1002 19:22:01.032592 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.032607 kubelet[2401]: W1002 19:22:01.032607 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.032730 kubelet[2401]: E1002 19:22:01.032624 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.033022 kubelet[2401]: E1002 19:22:01.033005 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.033022 kubelet[2401]: W1002 19:22:01.033020 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.033148 kubelet[2401]: E1002 19:22:01.033103 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.033253 kubelet[2401]: E1002 19:22:01.033240 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.033315 kubelet[2401]: W1002 19:22:01.033253 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.033364 kubelet[2401]: E1002 19:22:01.033337 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.033504 kubelet[2401]: E1002 19:22:01.033490 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.033566 kubelet[2401]: W1002 19:22:01.033504 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.033566 kubelet[2401]: E1002 19:22:01.033522 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.033748 kubelet[2401]: E1002 19:22:01.033735 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.033818 kubelet[2401]: W1002 19:22:01.033749 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.033818 kubelet[2401]: E1002 19:22:01.033767 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.033968 kubelet[2401]: E1002 19:22:01.033955 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.034022 kubelet[2401]: W1002 19:22:01.033969 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.034022 kubelet[2401]: E1002 19:22:01.033989 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.034871 kubelet[2401]: E1002 19:22:01.034836 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.034871 kubelet[2401]: W1002 19:22:01.034857 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.035338 kubelet[2401]: E1002 19:22:01.035318 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.035699 kubelet[2401]: E1002 19:22:01.035657 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.035699 kubelet[2401]: W1002 19:22:01.035699 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.035825 kubelet[2401]: E1002 19:22:01.035720 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.035991 kubelet[2401]: E1002 19:22:01.035976 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.036059 kubelet[2401]: W1002 19:22:01.036004 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.036059 kubelet[2401]: E1002 19:22:01.036024 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.036265 kubelet[2401]: E1002 19:22:01.036252 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.036265 kubelet[2401]: W1002 19:22:01.036266 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.036367 kubelet[2401]: E1002 19:22:01.036308 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.036737 kubelet[2401]: E1002 19:22:01.036721 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.036737 kubelet[2401]: W1002 19:22:01.036736 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.037882 kubelet[2401]: E1002 19:22:01.037596 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.037882 kubelet[2401]: W1002 19:22:01.037610 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.037882 kubelet[2401]: E1002 19:22:01.037626 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.037882 kubelet[2401]: E1002 19:22:01.037680 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.039462 kubelet[2401]: E1002 19:22:01.039444 2401 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:22:01.039541 kubelet[2401]: W1002 19:22:01.039460 2401 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:22:01.039541 kubelet[2401]: E1002 19:22:01.039493 2401 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:22:01.078767 env[1304]: time="2023-10-02T19:22:01.078716350Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:01.084141 env[1304]: time="2023-10-02T19:22:01.084100202Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:01.091405 env[1304]: time="2023-10-02T19:22:01.091361972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:01.095692 env[1304]: time="2023-10-02T19:22:01.095641313Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:01.096649 env[1304]: time="2023-10-02T19:22:01.096618322Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:22:01.100575 env[1304]: time="2023-10-02T19:22:01.100545660Z" level=info msg="CreateContainer within sandbox \"c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:22:01.135532 env[1304]: time="2023-10-02T19:22:01.135491395Z" level=info msg="CreateContainer within sandbox \"c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5\"" Oct 2 19:22:01.137513 env[1304]: time="2023-10-02T19:22:01.136211602Z" level=info msg="StartContainer for \"967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5\"" Oct 2 19:22:01.160851 systemd[1]: Started cri-containerd-967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5.scope. Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2885 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:01.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936373539316164343330356464303939356364323437643761343939 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit: BPF prog-id=140 op=LOAD Oct 2 19:22:01.173000 audit[3103]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c00030ca50 items=0 ppid=2885 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:01.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936373539316164343330356464303939356364323437643761343939 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.173000 audit: BPF prog-id=141 op=LOAD Oct 2 19:22:01.173000 audit[3103]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c00030ca98 items=0 ppid=2885 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:01.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936373539316164343330356464303939356364323437643761343939 Oct 2 19:22:01.174000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:22:01.174000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.174000 audit: BPF prog-id=142 op=LOAD Oct 2 19:22:01.174000 audit[3103]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c00030cb28 items=0 ppid=2885 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:01.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936373539316164343330356464303939356364323437643761343939 Oct 2 19:22:01.195735 env[1304]: time="2023-10-02T19:22:01.195701373Z" level=info msg="StartContainer for \"967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5\" returns successfully" Oct 2 19:22:01.200241 systemd[1]: cri-containerd-967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5.scope: Deactivated successfully. Oct 2 19:22:01.206000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:22:01.220294 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5-rootfs.mount: Deactivated successfully. Oct 2 19:22:02.463734 env[1304]: time="2023-10-02T19:22:02.463637882Z" level=info msg="shim disconnected" id=967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5 Oct 2 19:22:02.463734 env[1304]: time="2023-10-02T19:22:02.463724182Z" level=warning msg="cleaning up after shim disconnected" id=967591ad4305dd0995cd247d7a4995f8232d83d8b3c349dc77d537de9c504be5 namespace=k8s.io Oct 2 19:22:02.463734 env[1304]: time="2023-10-02T19:22:02.463737883Z" level=info msg="cleaning up dead shim" Oct 2 19:22:02.472496 env[1304]: time="2023-10-02T19:22:02.472454165Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3150 runtime=io.containerd.runc.v2\n" Oct 2 19:22:02.901505 env[1304]: time="2023-10-02T19:22:02.901463123Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:22:09.222739 env[1304]: time="2023-10-02T19:22:09.222686988Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:09.226885 env[1304]: time="2023-10-02T19:22:09.226847123Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:09.230460 env[1304]: time="2023-10-02T19:22:09.230418454Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:09.235235 env[1304]: time="2023-10-02T19:22:09.235198195Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:09.235808 env[1304]: time="2023-10-02T19:22:09.235778600Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:22:09.238814 env[1304]: time="2023-10-02T19:22:09.238785526Z" level=info msg="CreateContainer within sandbox \"c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:22:09.263805 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount102818014.mount: Deactivated successfully. Oct 2 19:22:09.271374 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2797393903.mount: Deactivated successfully. Oct 2 19:22:09.286898 env[1304]: time="2023-10-02T19:22:09.286860439Z" level=info msg="CreateContainer within sandbox \"c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45\"" Oct 2 19:22:09.288745 env[1304]: time="2023-10-02T19:22:09.288693154Z" level=info msg="StartContainer for \"4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45\"" Oct 2 19:22:09.314105 systemd[1]: Started cri-containerd-4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45.scope. Oct 2 19:22:09.330000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.349153 kernel: kauditd_printk_skb: 97 callbacks suppressed Oct 2 19:22:09.349255 kernel: audit: type=1400 audit(1696274529.330:1141): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.330000 audit[3172]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2885 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:09.368160 kernel: audit: type=1300 audit(1696274529.330:1141): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2885 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:09.368231 kernel: audit: type=1327 audit(1696274529.330:1141): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432343764353337333439646566343332333432666335616536623738 Oct 2 19:22:09.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432343764353337333439646566343332333432666335616536623738 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.402913 kernel: audit: type=1400 audit(1696274529.331:1142): avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.416097 kernel: audit: type=1400 audit(1696274529.331:1142): avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.431680 kernel: audit: type=1400 audit(1696274529.331:1142): avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.431763 env[1304]: time="2023-10-02T19:22:09.431680982Z" level=info msg="StartContainer for \"4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45\" returns successfully" Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.448684 kernel: audit: type=1400 audit(1696274529.331:1142): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.448774 kernel: audit: type=1400 audit(1696274529.331:1142): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.457747 kernel: audit: type=1400 audit(1696274529.331:1142): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.483751 kernel: audit: type=1400 audit(1696274529.331:1142): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.331000 audit: BPF prog-id=143 op=LOAD Oct 2 19:22:09.331000 audit[3172]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002ecbc0 items=0 ppid=2885 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:09.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432343764353337333439646566343332333432666335616536623738 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit: BPF prog-id=144 op=LOAD Oct 2 19:22:09.348000 audit[3172]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002ecc08 items=0 ppid=2885 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:09.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432343764353337333439646566343332333432666335616536623738 Oct 2 19:22:09.348000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:22:09.348000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:09.348000 audit: BPF prog-id=145 op=LOAD Oct 2 19:22:09.348000 audit[3172]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002ecc98 items=0 ppid=2885 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:09.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432343764353337333439646566343332333432666335616536623738 Oct 2 19:22:11.008709 env[1304]: time="2023-10-02T19:22:11.008621507Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:22:11.011495 systemd[1]: cri-containerd-4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45.scope: Deactivated successfully. Oct 2 19:22:11.015000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:22:11.034338 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45-rootfs.mount: Deactivated successfully. Oct 2 19:22:11.060695 kubelet[2401]: I1002 19:22:11.059864 2401 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 19:22:11.501752 kubelet[2401]: I1002 19:22:11.080092 2401 topology_manager.go:215] "Topology Admit Handler" podUID="4dfd11ec-abb6-46db-903e-d3ccdd7d8264" podNamespace="kube-system" podName="coredns-5dd5756b68-gwcf4" Oct 2 19:22:11.501752 kubelet[2401]: W1002 19:22:11.088696 2401 reflector.go:535] object-"kube-system"/"coredns": failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:22:11.501752 kubelet[2401]: E1002 19:22:11.088722 2401 reflector.go:147] object-"kube-system"/"coredns": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:22:11.501752 kubelet[2401]: I1002 19:22:11.091213 2401 topology_manager.go:215] "Topology Admit Handler" podUID="0b1e11e7-20f6-45f0-924b-3a2b08e8189e" podNamespace="calico-system" podName="calico-kube-controllers-74b9887bb6-5fv7v" Oct 2 19:22:11.501752 kubelet[2401]: I1002 19:22:11.094204 2401 topology_manager.go:215] "Topology Admit Handler" podUID="fe699508-8c25-47a9-aced-17181d2deff9" podNamespace="kube-system" podName="coredns-5dd5756b68-mhjlk" Oct 2 19:22:11.501752 kubelet[2401]: I1002 19:22:11.109838 2401 topology_manager.go:215] "Topology Admit Handler" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" podNamespace="calico-system" podName="csi-node-driver-vqlk8" Oct 2 19:22:11.501752 kubelet[2401]: I1002 19:22:11.201995 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/16349b50-b7cd-4368-9440-00bbbff6973a-socket-dir\") pod \"csi-node-driver-vqlk8\" (UID: \"16349b50-b7cd-4368-9440-00bbbff6973a\") " pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:11.086243 systemd[1]: Created slice kubepods-burstable-pod4dfd11ec_abb6_46db_903e_d3ccdd7d8264.slice. Oct 2 19:22:11.502601 kubelet[2401]: I1002 19:22:11.202030 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n9bdw\" (UniqueName: \"kubernetes.io/projected/16349b50-b7cd-4368-9440-00bbbff6973a-kube-api-access-n9bdw\") pod \"csi-node-driver-vqlk8\" (UID: \"16349b50-b7cd-4368-9440-00bbbff6973a\") " pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:11.502601 kubelet[2401]: I1002 19:22:11.202062 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c8ncl\" (UniqueName: \"kubernetes.io/projected/fe699508-8c25-47a9-aced-17181d2deff9-kube-api-access-c8ncl\") pod \"coredns-5dd5756b68-mhjlk\" (UID: \"fe699508-8c25-47a9-aced-17181d2deff9\") " pod="kube-system/coredns-5dd5756b68-mhjlk" Oct 2 19:22:11.502601 kubelet[2401]: I1002 19:22:11.202125 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c7lgp\" (UniqueName: \"kubernetes.io/projected/4dfd11ec-abb6-46db-903e-d3ccdd7d8264-kube-api-access-c7lgp\") pod \"coredns-5dd5756b68-gwcf4\" (UID: \"4dfd11ec-abb6-46db-903e-d3ccdd7d8264\") " pod="kube-system/coredns-5dd5756b68-gwcf4" Oct 2 19:22:11.502601 kubelet[2401]: I1002 19:22:11.202168 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bhk6j\" (UniqueName: \"kubernetes.io/projected/0b1e11e7-20f6-45f0-924b-3a2b08e8189e-kube-api-access-bhk6j\") pod \"calico-kube-controllers-74b9887bb6-5fv7v\" (UID: \"0b1e11e7-20f6-45f0-924b-3a2b08e8189e\") " pod="calico-system/calico-kube-controllers-74b9887bb6-5fv7v" Oct 2 19:22:11.502601 kubelet[2401]: I1002 19:22:11.202253 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/16349b50-b7cd-4368-9440-00bbbff6973a-etccalico\") pod \"csi-node-driver-vqlk8\" (UID: \"16349b50-b7cd-4368-9440-00bbbff6973a\") " pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:11.097976 systemd[1]: Created slice kubepods-besteffort-pod0b1e11e7_20f6_45f0_924b_3a2b08e8189e.slice. Oct 2 19:22:11.503138 kubelet[2401]: I1002 19:22:11.202275 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4dfd11ec-abb6-46db-903e-d3ccdd7d8264-config-volume\") pod \"coredns-5dd5756b68-gwcf4\" (UID: \"4dfd11ec-abb6-46db-903e-d3ccdd7d8264\") " pod="kube-system/coredns-5dd5756b68-gwcf4" Oct 2 19:22:11.503138 kubelet[2401]: I1002 19:22:11.202296 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/16349b50-b7cd-4368-9440-00bbbff6973a-registration-dir\") pod \"csi-node-driver-vqlk8\" (UID: \"16349b50-b7cd-4368-9440-00bbbff6973a\") " pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:11.503138 kubelet[2401]: I1002 19:22:11.202334 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/fe699508-8c25-47a9-aced-17181d2deff9-config-volume\") pod \"coredns-5dd5756b68-mhjlk\" (UID: \"fe699508-8c25-47a9-aced-17181d2deff9\") " pod="kube-system/coredns-5dd5756b68-mhjlk" Oct 2 19:22:11.503138 kubelet[2401]: I1002 19:22:11.202429 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/16349b50-b7cd-4368-9440-00bbbff6973a-varrun\") pod \"csi-node-driver-vqlk8\" (UID: \"16349b50-b7cd-4368-9440-00bbbff6973a\") " pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:11.503138 kubelet[2401]: I1002 19:22:11.202461 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/16349b50-b7cd-4368-9440-00bbbff6973a-kubelet-dir\") pod \"csi-node-driver-vqlk8\" (UID: \"16349b50-b7cd-4368-9440-00bbbff6973a\") " pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:11.108184 systemd[1]: Created slice kubepods-burstable-podfe699508_8c25_47a9_aced_17181d2deff9.slice. Oct 2 19:22:11.117424 systemd[1]: Created slice kubepods-besteffort-pod16349b50_b7cd_4368_9440_00bbbff6973a.slice. Oct 2 19:22:11.813465 env[1304]: time="2023-10-02T19:22:11.813411941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vqlk8,Uid:16349b50-b7cd-4368-9440-00bbbff6973a,Namespace:calico-system,Attempt:0,}" Oct 2 19:22:11.813970 env[1304]: time="2023-10-02T19:22:11.813412441Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-5fv7v,Uid:0b1e11e7-20f6-45f0-924b-3a2b08e8189e,Namespace:calico-system,Attempt:0,}" Oct 2 19:22:12.637087 env[1304]: time="2023-10-02T19:22:12.637032268Z" level=info msg="shim disconnected" id=4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45 Oct 2 19:22:12.637087 env[1304]: time="2023-10-02T19:22:12.637082568Z" level=warning msg="cleaning up after shim disconnected" id=4247d537349def432342fc5ae6b78973abeb113380f61fffc12c2c76a86a4d45 namespace=k8s.io Oct 2 19:22:12.637589 env[1304]: time="2023-10-02T19:22:12.637096068Z" level=info msg="cleaning up dead shim" Oct 2 19:22:12.645502 env[1304]: time="2023-10-02T19:22:12.645458237Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3233 runtime=io.containerd.runc.v2\n" Oct 2 19:22:12.708986 env[1304]: time="2023-10-02T19:22:12.708937462Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gwcf4,Uid:4dfd11ec-abb6-46db-903e-d3ccdd7d8264,Namespace:kube-system,Attempt:0,}" Oct 2 19:22:12.713244 env[1304]: time="2023-10-02T19:22:12.713208397Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-mhjlk,Uid:fe699508-8c25-47a9-aced-17181d2deff9,Namespace:kube-system,Attempt:0,}" Oct 2 19:22:12.771777 env[1304]: time="2023-10-02T19:22:12.771721081Z" level=error msg="Failed to destroy network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.772220 env[1304]: time="2023-10-02T19:22:12.772176385Z" level=error msg="encountered an error cleaning up failed sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.772353 env[1304]: time="2023-10-02T19:22:12.772236285Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vqlk8,Uid:16349b50-b7cd-4368-9440-00bbbff6973a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.772504 kubelet[2401]: E1002 19:22:12.772485 2401 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.772867 kubelet[2401]: E1002 19:22:12.772549 2401 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:12.772867 kubelet[2401]: E1002 19:22:12.772580 2401 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-vqlk8" Oct 2 19:22:12.772867 kubelet[2401]: E1002 19:22:12.772680 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:22:12.799406 env[1304]: time="2023-10-02T19:22:12.799355209Z" level=error msg="Failed to destroy network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.799709 env[1304]: time="2023-10-02T19:22:12.799654312Z" level=error msg="encountered an error cleaning up failed sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.799808 env[1304]: time="2023-10-02T19:22:12.799741812Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-5fv7v,Uid:0b1e11e7-20f6-45f0-924b-3a2b08e8189e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.801587 kubelet[2401]: E1002 19:22:12.799999 2401 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.801587 kubelet[2401]: E1002 19:22:12.800079 2401 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-74b9887bb6-5fv7v" Oct 2 19:22:12.801587 kubelet[2401]: E1002 19:22:12.800109 2401 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-74b9887bb6-5fv7v" Oct 2 19:22:12.802915 kubelet[2401]: E1002 19:22:12.802880 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-74b9887bb6-5fv7v_calico-system(0b1e11e7-20f6-45f0-924b-3a2b08e8189e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-74b9887bb6-5fv7v_calico-system(0b1e11e7-20f6-45f0-924b-3a2b08e8189e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-74b9887bb6-5fv7v" podUID="0b1e11e7-20f6-45f0-924b-3a2b08e8189e" Oct 2 19:22:12.850147 env[1304]: time="2023-10-02T19:22:12.850089729Z" level=error msg="Failed to destroy network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.850439 env[1304]: time="2023-10-02T19:22:12.850401231Z" level=error msg="encountered an error cleaning up failed sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.850563 env[1304]: time="2023-10-02T19:22:12.850458732Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-mhjlk,Uid:fe699508-8c25-47a9-aced-17181d2deff9,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.851834 kubelet[2401]: E1002 19:22:12.850737 2401 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.851834 kubelet[2401]: E1002 19:22:12.850800 2401 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-mhjlk" Oct 2 19:22:12.851834 kubelet[2401]: E1002 19:22:12.850831 2401 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-mhjlk" Oct 2 19:22:12.852002 kubelet[2401]: E1002 19:22:12.850893 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-mhjlk_kube-system(fe699508-8c25-47a9-aced-17181d2deff9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-mhjlk_kube-system(fe699508-8c25-47a9-aced-17181d2deff9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-mhjlk" podUID="fe699508-8c25-47a9-aced-17181d2deff9" Oct 2 19:22:12.872817 env[1304]: time="2023-10-02T19:22:12.872767816Z" level=error msg="Failed to destroy network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.873118 env[1304]: time="2023-10-02T19:22:12.873082819Z" level=error msg="encountered an error cleaning up failed sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.873212 env[1304]: time="2023-10-02T19:22:12.873141519Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gwcf4,Uid:4dfd11ec-abb6-46db-903e-d3ccdd7d8264,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.873692 kubelet[2401]: E1002 19:22:12.873387 2401 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:12.873692 kubelet[2401]: E1002 19:22:12.873429 2401 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-gwcf4" Oct 2 19:22:12.873692 kubelet[2401]: E1002 19:22:12.873456 2401 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-gwcf4" Oct 2 19:22:12.873882 kubelet[2401]: E1002 19:22:12.873520 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-gwcf4_kube-system(4dfd11ec-abb6-46db-903e-d3ccdd7d8264)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-gwcf4_kube-system(4dfd11ec-abb6-46db-903e-d3ccdd7d8264)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-gwcf4" podUID="4dfd11ec-abb6-46db-903e-d3ccdd7d8264" Oct 2 19:22:12.921980 kubelet[2401]: I1002 19:22:12.920048 2401 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:12.922387 env[1304]: time="2023-10-02T19:22:12.922351726Z" level=info msg="StopPodSandbox for \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\"" Oct 2 19:22:12.923961 kubelet[2401]: I1002 19:22:12.923931 2401 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:12.924567 env[1304]: time="2023-10-02T19:22:12.924538044Z" level=info msg="StopPodSandbox for \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\"" Oct 2 19:22:12.929400 kubelet[2401]: I1002 19:22:12.929075 2401 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:12.929997 env[1304]: time="2023-10-02T19:22:12.929971589Z" level=info msg="StopPodSandbox for \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\"" Oct 2 19:22:12.943129 env[1304]: time="2023-10-02T19:22:12.943097297Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:22:12.944223 kubelet[2401]: I1002 19:22:12.943926 2401 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:12.944472 env[1304]: time="2023-10-02T19:22:12.944445308Z" level=info msg="StopPodSandbox for \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\"" Oct 2 19:22:13.000983 env[1304]: time="2023-10-02T19:22:13.000913175Z" level=error msg="StopPodSandbox for \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\" failed" error="failed to destroy network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:13.001541 kubelet[2401]: E1002 19:22:13.001510 2401 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:13.001678 kubelet[2401]: E1002 19:22:13.001606 2401 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3"} Oct 2 19:22:13.001749 kubelet[2401]: E1002 19:22:13.001679 2401 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"16349b50-b7cd-4368-9440-00bbbff6973a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:22:13.001749 kubelet[2401]: E1002 19:22:13.001743 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"16349b50-b7cd-4368-9440-00bbbff6973a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:22:13.027848 env[1304]: time="2023-10-02T19:22:13.027787394Z" level=error msg="StopPodSandbox for \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\" failed" error="failed to destroy network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:13.028002 env[1304]: time="2023-10-02T19:22:13.027943996Z" level=error msg="StopPodSandbox for \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\" failed" error="failed to destroy network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:13.029847 kubelet[2401]: E1002 19:22:13.029820 2401 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:13.029988 kubelet[2401]: E1002 19:22:13.029872 2401 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab"} Oct 2 19:22:13.030041 kubelet[2401]: E1002 19:22:13.030015 2401 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4dfd11ec-abb6-46db-903e-d3ccdd7d8264\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:22:13.030165 kubelet[2401]: E1002 19:22:13.030150 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4dfd11ec-abb6-46db-903e-d3ccdd7d8264\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-gwcf4" podUID="4dfd11ec-abb6-46db-903e-d3ccdd7d8264" Oct 2 19:22:13.030332 kubelet[2401]: E1002 19:22:13.030315 2401 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:13.030419 kubelet[2401]: E1002 19:22:13.030349 2401 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1"} Oct 2 19:22:13.030505 kubelet[2401]: E1002 19:22:13.030492 2401 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fe699508-8c25-47a9-aced-17181d2deff9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:22:13.030647 kubelet[2401]: E1002 19:22:13.030632 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fe699508-8c25-47a9-aced-17181d2deff9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-mhjlk" podUID="fe699508-8c25-47a9-aced-17181d2deff9" Oct 2 19:22:13.045100 env[1304]: time="2023-10-02T19:22:13.045050035Z" level=error msg="StopPodSandbox for \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\" failed" error="failed to destroy network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:22:13.045336 kubelet[2401]: E1002 19:22:13.045318 2401 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:13.045440 kubelet[2401]: E1002 19:22:13.045350 2401 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e"} Oct 2 19:22:13.045440 kubelet[2401]: E1002 19:22:13.045415 2401 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0b1e11e7-20f6-45f0-924b-3a2b08e8189e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:22:13.045546 kubelet[2401]: E1002 19:22:13.045449 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0b1e11e7-20f6-45f0-924b-3a2b08e8189e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-74b9887bb6-5fv7v" podUID="0b1e11e7-20f6-45f0-924b-3a2b08e8189e" Oct 2 19:22:13.665521 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1-shm.mount: Deactivated successfully. Oct 2 19:22:13.665637 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e-shm.mount: Deactivated successfully. Oct 2 19:22:13.665730 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3-shm.mount: Deactivated successfully. Oct 2 19:22:18.118905 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2023515885.mount: Deactivated successfully. Oct 2 19:22:18.225151 env[1304]: time="2023-10-02T19:22:18.225099889Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:18.232250 env[1304]: time="2023-10-02T19:22:18.232209444Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:18.235740 env[1304]: time="2023-10-02T19:22:18.235711871Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:18.240197 env[1304]: time="2023-10-02T19:22:18.240163805Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:18.240634 env[1304]: time="2023-10-02T19:22:18.240604209Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:22:18.244064 env[1304]: time="2023-10-02T19:22:18.244027735Z" level=info msg="CreateContainer within sandbox \"c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:22:18.278358 env[1304]: time="2023-10-02T19:22:18.278316600Z" level=info msg="CreateContainer within sandbox \"c16dc9eaca897dbcd7d16c8110908d1dcc2ee02fb47f7012913ef259f51b823f\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569\"" Oct 2 19:22:18.279964 env[1304]: time="2023-10-02T19:22:18.279939012Z" level=info msg="StartContainer for \"80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569\"" Oct 2 19:22:18.305594 systemd[1]: Started cri-containerd-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569.scope. Oct 2 19:22:18.326882 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 19:22:18.326988 kernel: audit: type=1400 audit(1696274538.320:1148): avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2885 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.359289 kernel: audit: type=1300 audit(1696274538.320:1148): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2885 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830643763623366376231343935663436373634656234313434316639 Oct 2 19:22:18.363476 env[1304]: time="2023-10-02T19:22:18.360806136Z" level=info msg="StartContainer for \"80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569\" returns successfully" Oct 2 19:22:18.379134 kernel: audit: type=1327 audit(1696274538.320:1148): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830643763623366376231343935663436373634656234313434316639 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.405657 kernel: audit: type=1400 audit(1696274538.320:1149): avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.405760 kernel: audit: type=1400 audit(1696274538.320:1149): avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.405791 kernel: audit: type=1400 audit(1696274538.320:1149): avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.432543 kernel: audit: type=1400 audit(1696274538.320:1149): avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.433748 kernel: audit: type=1400 audit(1696274538.320:1149): avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.458620 kernel: audit: type=1400 audit(1696274538.320:1149): avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.472772 kernel: audit: type=1400 audit(1696274538.320:1149): avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit: BPF prog-id=146 op=LOAD Oct 2 19:22:18.320000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002d9be0 items=0 ppid=2885 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830643763623366376231343935663436373634656234313434316639 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit: BPF prog-id=147 op=LOAD Oct 2 19:22:18.320000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002d9c28 items=0 ppid=2885 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830643763623366376231343935663436373634656234313434316639 Oct 2 19:22:18.320000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:22:18.320000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:18.320000 audit: BPF prog-id=148 op=LOAD Oct 2 19:22:18.320000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002d9cb8 items=0 ppid=2885 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830643763623366376231343935663436373634656234313434316639 Oct 2 19:22:18.668055 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:22:18.668203 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:22:19.016224 kubelet[2401]: I1002 19:22:19.016180 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-nwt42" podStartSLOduration=3.5901464709999997 podCreationTimestamp="2023-10-02 19:21:51 +0000 UTC" firstStartedPulling="2023-10-02 19:21:53.814949495 +0000 UTC m=+20.159045083" lastFinishedPulling="2023-10-02 19:22:18.240919711 +0000 UTC m=+44.585015299" observedRunningTime="2023-10-02 19:22:19.01526618 +0000 UTC m=+45.359361768" watchObservedRunningTime="2023-10-02 19:22:19.016116687 +0000 UTC m=+45.360212375" Oct 2 19:22:19.993951 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.XYlFkQ.mount: Deactivated successfully. Oct 2 19:22:20.113000 audit[3608]: AVC avc: denied { write } for pid=3608 comm="tee" name="fd" dev="proc" ino=29515 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:20.113000 audit[3608]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc76f1d976 a2=241 a3=1b6 items=1 ppid=3575 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.113000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:22:20.113000 audit: PATH item=0 name="/dev/fd/63" inode=30228 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:20.113000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:20.123000 audit[3612]: AVC avc: denied { write } for pid=3612 comm="tee" name="fd" dev="proc" ino=29523 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:20.127000 audit[3628]: AVC avc: denied { write } for pid=3628 comm="tee" name="fd" dev="proc" ino=29529 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:20.123000 audit[3612]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd2bb09975 a2=241 a3=1b6 items=1 ppid=3577 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.123000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:22:20.123000 audit: PATH item=0 name="/dev/fd/63" inode=29504 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:20.123000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:20.133000 audit[3631]: AVC avc: denied { write } for pid=3631 comm="tee" name="fd" dev="proc" ino=29536 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:20.135000 audit[3634]: AVC avc: denied { write } for pid=3634 comm="tee" name="fd" dev="proc" ino=29539 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:20.137000 audit[3626]: AVC avc: denied { write } for pid=3626 comm="tee" name="fd" dev="proc" ino=29542 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:20.127000 audit[3628]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe68377965 a2=241 a3=1b6 items=1 ppid=3593 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.127000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:22:20.127000 audit: PATH item=0 name="/dev/fd/63" inode=29517 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:20.127000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:20.133000 audit[3631]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe8d5d5975 a2=241 a3=1b6 items=1 ppid=3579 pid=3631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.133000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:22:20.133000 audit: PATH item=0 name="/dev/fd/63" inode=29520 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:20.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:20.143000 audit[3638]: AVC avc: denied { write } for pid=3638 comm="tee" name="fd" dev="proc" ino=30244 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:20.143000 audit[3638]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff8af81966 a2=241 a3=1b6 items=1 ppid=3590 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.143000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:22:20.143000 audit: PATH item=0 name="/dev/fd/63" inode=29532 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:20.143000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:20.135000 audit[3634]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdf9490975 a2=241 a3=1b6 items=1 ppid=3580 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.135000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:22:20.135000 audit: PATH item=0 name="/dev/fd/63" inode=29526 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:20.135000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:20.137000 audit[3626]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcccdfe977 a2=241 a3=1b6 items=1 ppid=3582 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.137000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:22:20.137000 audit: PATH item=0 name="/dev/fd/63" inode=30233 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:20.137000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit: BPF prog-id=149 op=LOAD Oct 2 19:22:20.526000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffea7a9e5a0 a2=70 a3=7f04c4229000 items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.526000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.526000 audit: BPF prog-id=149 op=UNLOAD Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit: BPF prog-id=150 op=LOAD Oct 2 19:22:20.526000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffea7a9e5a0 a2=70 a3=6e items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.526000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.526000 audit: BPF prog-id=150 op=UNLOAD Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffea7a9e550 a2=70 a3=7ffea7a9e5a0 items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.526000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit: BPF prog-id=151 op=LOAD Oct 2 19:22:20.526000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffea7a9e530 a2=70 a3=7ffea7a9e5a0 items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.526000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.526000 audit: BPF prog-id=151 op=UNLOAD Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffea7a9e610 a2=70 a3=0 items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.526000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffea7a9e600 a2=70 a3=0 items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.526000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.526000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.526000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffea7a9e640 a2=70 a3=0 items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.526000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { perfmon } for pid=3714 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit[3714]: AVC avc: denied { bpf } for pid=3714 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.531000 audit: BPF prog-id=152 op=LOAD Oct 2 19:22:20.531000 audit[3714]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffea7a9e560 a2=70 a3=ffffffff items=0 ppid=3583 pid=3714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.531000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:20.534000 audit[3716]: AVC avc: denied { bpf } for pid=3716 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.534000 audit[3716]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc2f857a90 a2=70 a3=fff80800 items=0 ppid=3583 pid=3716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.534000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:22:20.535000 audit[3716]: AVC avc: denied { bpf } for pid=3716 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:20.535000 audit[3716]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc2f857960 a2=70 a3=3 items=0 ppid=3583 pid=3716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.535000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:22:20.541000 audit: BPF prog-id=152 op=UNLOAD Oct 2 19:22:20.676000 audit[3741]: NETFILTER_CFG table=raw:101 family=2 entries=19 op=nft_register_chain pid=3741 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:20.676000 audit[3741]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffdce6480b0 a2=0 a3=7ffdce64809c items=0 ppid=3583 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.676000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:20.677000 audit[3743]: NETFILTER_CFG table=mangle:102 family=2 entries=19 op=nft_register_chain pid=3743 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:20.677000 audit[3743]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffee53480f0 a2=0 a3=562261c3d000 items=0 ppid=3583 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.677000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:20.679000 audit[3742]: NETFILTER_CFG table=nat:103 family=2 entries=16 op=nft_register_chain pid=3742 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:20.679000 audit[3742]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffd9fe87570 a2=0 a3=5646a563a000 items=0 ppid=3583 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.679000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:20.708000 audit[3744]: NETFILTER_CFG table=filter:104 family=2 entries=39 op=nft_register_chain pid=3744 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:20.708000 audit[3744]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffeba3136e0 a2=0 a3=559da25d0000 items=0 ppid=3583 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:20.708000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:21.449000 systemd-networkd[1441]: vxlan.calico: Link UP Oct 2 19:22:21.449012 systemd-networkd[1441]: vxlan.calico: Gained carrier Oct 2 19:22:23.377872 systemd-networkd[1441]: vxlan.calico: Gained IPv6LL Oct 2 19:22:23.702106 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.JaHWaR.mount: Deactivated successfully. Oct 2 19:22:23.814257 env[1304]: time="2023-10-02T19:22:23.814192566Z" level=info msg="StopPodSandbox for \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\"" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.855 [INFO][3810] k8s.go 576: Cleaning up netns ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.856 [INFO][3810] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" iface="eth0" netns="/var/run/netns/cni-cc0b445d-34c8-0fc6-94d7-fb94e5524053" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.856 [INFO][3810] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" iface="eth0" netns="/var/run/netns/cni-cc0b445d-34c8-0fc6-94d7-fb94e5524053" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.856 [INFO][3810] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" iface="eth0" netns="/var/run/netns/cni-cc0b445d-34c8-0fc6-94d7-fb94e5524053" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.856 [INFO][3810] k8s.go 583: Releasing IP address(es) ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.856 [INFO][3810] utils.go 196: Calico CNI releasing IP address ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.875 [INFO][3816] ipam_plugin.go 416: Releasing address using handleID ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:23.890125 env[1304]: time="2023-10-02T19:22:23Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:23.890125 env[1304]: time="2023-10-02T19:22:23Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.886 [WARNING][3816] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.886 [INFO][3816] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:23.890125 env[1304]: time="2023-10-02T19:22:23Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:23.890125 env[1304]: 2023-10-02 19:22:23.888 [INFO][3810] k8s.go 589: Teardown processing complete. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:23.894385 env[1304]: time="2023-10-02T19:22:23.890305723Z" level=info msg="TearDown network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\" successfully" Oct 2 19:22:23.894385 env[1304]: time="2023-10-02T19:22:23.890350824Z" level=info msg="StopPodSandbox for \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\" returns successfully" Oct 2 19:22:23.894385 env[1304]: time="2023-10-02T19:22:23.891050929Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gwcf4,Uid:4dfd11ec-abb6-46db-903e-d3ccdd7d8264,Namespace:kube-system,Attempt:1,}" Oct 2 19:22:23.892187 systemd[1]: run-netns-cni\x2dcc0b445d\x2d34c8\x2d0fc6\x2d94d7\x2dfb94e5524053.mount: Deactivated successfully. Oct 2 19:22:24.040307 systemd-networkd[1441]: cali4c249a9e69e: Link UP Oct 2 19:22:24.047426 systemd-networkd[1441]: cali4c249a9e69e: Gained carrier Oct 2 19:22:24.051908 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4c249a9e69e: link becomes ready Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:23.960 [INFO][3823] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0 coredns-5dd5756b68- kube-system 4dfd11ec-abb6-46db-903e-d3ccdd7d8264 706 0 2023-10-02 19:21:46 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.0-a-2ed8b7e9a3 coredns-5dd5756b68-gwcf4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4c249a9e69e [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:23.960 [INFO][3823] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.002 [INFO][3834] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" HandleID="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.010 [INFO][3834] ipam_plugin.go 269: Auto assigning IP ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" HandleID="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0005450a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.0-a-2ed8b7e9a3", "pod":"coredns-5dd5756b68-gwcf4", "timestamp":"2023-10-02 19:22:24.002565145 +0000 UTC"}, Hostname:"ci-3510.3.0-a-2ed8b7e9a3", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:24.064136 env[1304]: time="2023-10-02T19:22:24Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:24.064136 env[1304]: time="2023-10-02T19:22:24Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.010 [INFO][3834] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-2ed8b7e9a3' Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.011 [INFO][3834] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.014 [INFO][3834] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.017 [INFO][3834] ipam.go 489: Trying affinity for 192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.019 [INFO][3834] ipam.go 155: Attempting to load block cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.020 [INFO][3834] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.020 [INFO][3834] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.2.128/26 handle="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.021 [INFO][3834] ipam.go 1682: Creating new handle: k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.024 [INFO][3834] ipam.go 1203: Writing block in order to claim IPs block=192.168.2.128/26 handle="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.032 [INFO][3834] ipam.go 1216: Successfully claimed IPs: [192.168.2.129/26] block=192.168.2.128/26 handle="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.032 [INFO][3834] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.2.129/26] handle="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:24.064136 env[1304]: time="2023-10-02T19:22:24Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:24.064136 env[1304]: 2023-10-02 19:22:24.032 [INFO][3834] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.2.129/26] IPv6=[] ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" HandleID="k8s-pod-network.b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:24.065147 env[1304]: 2023-10-02 19:22:24.034 [INFO][3823] k8s.go 383: Populated endpoint ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"4dfd11ec-abb6-46db-903e-d3ccdd7d8264", ResourceVersion:"706", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"", Pod:"coredns-5dd5756b68-gwcf4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c249a9e69e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:24.065147 env[1304]: 2023-10-02 19:22:24.034 [INFO][3823] k8s.go 384: Calico CNI using IPs: [192.168.2.129/32] ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:24.065147 env[1304]: 2023-10-02 19:22:24.035 [INFO][3823] dataplane_linux.go 68: Setting the host side veth name to cali4c249a9e69e ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:24.065147 env[1304]: 2023-10-02 19:22:24.035 [INFO][3823] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:24.065147 env[1304]: 2023-10-02 19:22:24.048 [INFO][3823] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"4dfd11ec-abb6-46db-903e-d3ccdd7d8264", ResourceVersion:"706", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a", Pod:"coredns-5dd5756b68-gwcf4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c249a9e69e", MAC:"da:10:c6:08:11:ac", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:24.065147 env[1304]: 2023-10-02 19:22:24.058 [INFO][3823] k8s.go 489: Wrote updated endpoint to datastore ContainerID="b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a" Namespace="kube-system" Pod="coredns-5dd5756b68-gwcf4" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:24.086654 env[1304]: time="2023-10-02T19:22:24.086555654Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:24.086829 env[1304]: time="2023-10-02T19:22:24.086718055Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:24.086829 env[1304]: time="2023-10-02T19:22:24.086789256Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:24.087095 env[1304]: time="2023-10-02T19:22:24.087016457Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a pid=3864 runtime=io.containerd.runc.v2 Oct 2 19:22:24.090000 audit[3874]: NETFILTER_CFG table=filter:105 family=2 entries=36 op=nft_register_chain pid=3874 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:24.107266 kernel: kauditd_printk_skb: 151 callbacks suppressed Oct 2 19:22:24.107340 kernel: audit: type=1325 audit(1696274544.090:1179): table=filter:105 family=2 entries=36 op=nft_register_chain pid=3874 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:24.129098 kernel: audit: type=1300 audit(1696274544.090:1179): arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffc8144d5e0 a2=0 a3=7ffc8144d5cc items=0 ppid=3583 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.090000 audit[3874]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffc8144d5e0 a2=0 a3=7ffc8144d5cc items=0 ppid=3583 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.111485 systemd[1]: Started cri-containerd-b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a.scope. Oct 2 19:22:24.090000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:24.143697 kernel: audit: type=1327 audit(1696274544.090:1179): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160743 kernel: audit: type=1400 audit(1696274544.145:1180): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.187487 kernel: audit: type=1400 audit(1696274544.145:1181): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.187561 kernel: audit: type=1400 audit(1696274544.145:1182): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.200538 kernel: audit: type=1400 audit(1696274544.145:1183): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.214724 kernel: audit: type=1400 audit(1696274544.145:1184): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.242912 kernel: audit: type=1400 audit(1696274544.145:1185): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.242995 kernel: audit: type=1400 audit(1696274544.145:1186): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.145000 audit: BPF prog-id=153 op=LOAD Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3864 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343963383634346261633937383938383261653730333164376631 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3864 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343963383634346261633937383938383261653730333164376631 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit: BPF prog-id=154 op=LOAD Oct 2 19:22:24.160000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002873d0 items=0 ppid=3864 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343963383634346261633937383938383261653730333164376631 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit: BPF prog-id=155 op=LOAD Oct 2 19:22:24.160000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000287418 items=0 ppid=3864 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343963383634346261633937383938383261653730333164376631 Oct 2 19:22:24.160000 audit: BPF prog-id=155 op=UNLOAD Oct 2 19:22:24.160000 audit: BPF prog-id=154 op=UNLOAD Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.160000 audit: BPF prog-id=156 op=LOAD Oct 2 19:22:24.160000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000287828 items=0 ppid=3864 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343963383634346261633937383938383261653730333164376631 Oct 2 19:22:24.248947 env[1304]: time="2023-10-02T19:22:24.248905531Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gwcf4,Uid:4dfd11ec-abb6-46db-903e-d3ccdd7d8264,Namespace:kube-system,Attempt:1,} returns sandbox id \"b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a\"" Oct 2 19:22:24.255026 env[1304]: time="2023-10-02T19:22:24.255002276Z" level=info msg="CreateContainer within sandbox \"b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:22:24.291190 env[1304]: time="2023-10-02T19:22:24.291100437Z" level=info msg="CreateContainer within sandbox \"b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"9506fb432248a884b43927b8a88601c74a888576152168189d5548d39501fae7\"" Oct 2 19:22:24.293978 env[1304]: time="2023-10-02T19:22:24.293949558Z" level=info msg="StartContainer for \"9506fb432248a884b43927b8a88601c74a888576152168189d5548d39501fae7\"" Oct 2 19:22:24.311553 systemd[1]: Started cri-containerd-9506fb432248a884b43927b8a88601c74a888576152168189d5548d39501fae7.scope. Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.324000 audit: BPF prog-id=157 op=LOAD Oct 2 19:22:24.325000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.325000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3864 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303666623433323234386138383462343339323762386138383630 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3864 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303666623433323234386138383462343339323762386138383630 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit: BPF prog-id=158 op=LOAD Oct 2 19:22:24.326000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000223110 items=0 ppid=3864 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303666623433323234386138383462343339323762386138383630 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.326000 audit: BPF prog-id=159 op=LOAD Oct 2 19:22:24.326000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000223158 items=0 ppid=3864 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303666623433323234386138383462343339323762386138383630 Oct 2 19:22:24.327000 audit: BPF prog-id=159 op=UNLOAD Oct 2 19:22:24.327000 audit: BPF prog-id=158 op=UNLOAD Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:24.327000 audit: BPF prog-id=160 op=LOAD Oct 2 19:22:24.327000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000223568 items=0 ppid=3864 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:24.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303666623433323234386138383462343339323762386138383630 Oct 2 19:22:24.348211 env[1304]: time="2023-10-02T19:22:24.348168151Z" level=info msg="StartContainer for \"9506fb432248a884b43927b8a88601c74a888576152168189d5548d39501fae7\" returns successfully" Oct 2 19:22:24.812339 env[1304]: time="2023-10-02T19:22:24.812274817Z" level=info msg="StopPodSandbox for \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\"" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.854 [INFO][3958] k8s.go 576: Cleaning up netns ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.854 [INFO][3958] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" iface="eth0" netns="/var/run/netns/cni-4c187f89-d3da-942e-54ae-d94a5208c381" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.854 [INFO][3958] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" iface="eth0" netns="/var/run/netns/cni-4c187f89-d3da-942e-54ae-d94a5208c381" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.855 [INFO][3958] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" iface="eth0" netns="/var/run/netns/cni-4c187f89-d3da-942e-54ae-d94a5208c381" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.855 [INFO][3958] k8s.go 583: Releasing IP address(es) ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.855 [INFO][3958] utils.go 196: Calico CNI releasing IP address ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.874 [INFO][3965] ipam_plugin.go 416: Releasing address using handleID ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:24.882603 env[1304]: time="2023-10-02T19:22:24Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:24.882603 env[1304]: time="2023-10-02T19:22:24Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.879 [WARNING][3965] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.879 [INFO][3965] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:24.882603 env[1304]: time="2023-10-02T19:22:24Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:24.882603 env[1304]: 2023-10-02 19:22:24.881 [INFO][3958] k8s.go 589: Teardown processing complete. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:24.884834 env[1304]: time="2023-10-02T19:22:24.884780243Z" level=info msg="TearDown network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\" successfully" Oct 2 19:22:24.884991 env[1304]: time="2023-10-02T19:22:24.884968644Z" level=info msg="StopPodSandbox for \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\" returns successfully" Oct 2 19:22:24.886261 systemd[1]: run-netns-cni\x2d4c187f89\x2dd3da\x2d942e\x2d54ae\x2dd94a5208c381.mount: Deactivated successfully. Oct 2 19:22:24.888030 env[1304]: time="2023-10-02T19:22:24.887819265Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-5fv7v,Uid:0b1e11e7-20f6-45f0-924b-3a2b08e8189e,Namespace:calico-system,Attempt:1,}" Oct 2 19:22:25.021000 audit[3990]: NETFILTER_CFG table=filter:106 family=2 entries=14 op=nft_register_rule pid=3990 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:25.021000 audit[3990]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffc2da5fa70 a2=0 a3=7ffc2da5fa5c items=0 ppid=2574 pid=3990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.021000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:25.024121 kubelet[2401]: I1002 19:22:25.024086 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-gwcf4" podStartSLOduration=39.024030251 podCreationTimestamp="2023-10-02 19:21:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:22:25.001231287 +0000 UTC m=+51.345326975" watchObservedRunningTime="2023-10-02 19:22:25.024030251 +0000 UTC m=+51.368125939" Oct 2 19:22:25.021000 audit[3990]: NETFILTER_CFG table=nat:107 family=2 entries=14 op=nft_register_rule pid=3990 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:25.021000 audit[3990]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffc2da5fa70 a2=0 a3=31030 items=0 ppid=2574 pid=3990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.021000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:25.050000 audit[3993]: NETFILTER_CFG table=filter:108 family=2 entries=11 op=nft_register_rule pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:25.050000 audit[3993]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffd5d591150 a2=0 a3=7ffd5d59113c items=0 ppid=2574 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.050000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:25.053000 audit[3993]: NETFILTER_CFG table=nat:109 family=2 entries=35 op=nft_register_chain pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:25.053000 audit[3993]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffd5d591150 a2=0 a3=7ffd5d59113c items=0 ppid=2574 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.053000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:25.083590 systemd-networkd[1441]: cali1930338cb22: Link UP Oct 2 19:22:25.088745 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1930338cb22: link becomes ready Oct 2 19:22:25.089879 systemd-networkd[1441]: cali1930338cb22: Gained carrier Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:24.957 [INFO][3972] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0 calico-kube-controllers-74b9887bb6- calico-system 0b1e11e7-20f6-45f0-924b-3a2b08e8189e 716 0 2023-10-02 19:21:52 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:74b9887bb6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.0-a-2ed8b7e9a3 calico-kube-controllers-74b9887bb6-5fv7v eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali1930338cb22 [] []}} ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:24.957 [INFO][3972] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.005 [INFO][3983] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" HandleID="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.034 [INFO][3983] ipam_plugin.go 269: Auto assigning IP ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" HandleID="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000132170), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.0-a-2ed8b7e9a3", "pod":"calico-kube-controllers-74b9887bb6-5fv7v", "timestamp":"2023-10-02 19:22:25.005105115 +0000 UTC"}, Hostname:"ci-3510.3.0-a-2ed8b7e9a3", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:25.098920 env[1304]: time="2023-10-02T19:22:25Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:25.098920 env[1304]: time="2023-10-02T19:22:25Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.034 [INFO][3983] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-2ed8b7e9a3' Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.040 [INFO][3983] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.048 [INFO][3983] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.052 [INFO][3983] ipam.go 489: Trying affinity for 192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.055 [INFO][3983] ipam.go 155: Attempting to load block cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.057 [INFO][3983] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.057 [INFO][3983] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.2.128/26 handle="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.058 [INFO][3983] ipam.go 1682: Creating new handle: k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1 Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.062 [INFO][3983] ipam.go 1203: Writing block in order to claim IPs block=192.168.2.128/26 handle="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.067 [INFO][3983] ipam.go 1216: Successfully claimed IPs: [192.168.2.130/26] block=192.168.2.128/26 handle="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.069 [INFO][3983] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.2.130/26] handle="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:25.098920 env[1304]: time="2023-10-02T19:22:25Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:25.098920 env[1304]: 2023-10-02 19:22:25.073 [INFO][3983] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.2.130/26] IPv6=[] ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" HandleID="k8s-pod-network.b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:25.099887 env[1304]: 2023-10-02 19:22:25.074 [INFO][3972] k8s.go 383: Populated endpoint ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"0b1e11e7-20f6-45f0-924b-3a2b08e8189e", ResourceVersion:"716", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"", Pod:"calico-kube-controllers-74b9887bb6-5fv7v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.2.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1930338cb22", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:25.099887 env[1304]: 2023-10-02 19:22:25.074 [INFO][3972] k8s.go 384: Calico CNI using IPs: [192.168.2.130/32] ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:25.099887 env[1304]: 2023-10-02 19:22:25.074 [INFO][3972] dataplane_linux.go 68: Setting the host side veth name to cali1930338cb22 ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:25.099887 env[1304]: 2023-10-02 19:22:25.075 [INFO][3972] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:25.099887 env[1304]: 2023-10-02 19:22:25.090 [INFO][3972] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"0b1e11e7-20f6-45f0-924b-3a2b08e8189e", ResourceVersion:"716", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1", Pod:"calico-kube-controllers-74b9887bb6-5fv7v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.2.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1930338cb22", MAC:"ea:06:78:e8:24:8b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:25.099887 env[1304]: 2023-10-02 19:22:25.097 [INFO][3972] k8s.go 489: Wrote updated endpoint to datastore ContainerID="b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-5fv7v" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:25.123184 env[1304]: time="2023-10-02T19:22:25.123118663Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:25.123406 env[1304]: time="2023-10-02T19:22:25.123163663Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:25.123406 env[1304]: time="2023-10-02T19:22:25.123177563Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:25.123553 env[1304]: time="2023-10-02T19:22:25.123420165Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1 pid=4014 runtime=io.containerd.runc.v2 Oct 2 19:22:25.159605 systemd[1]: Started cri-containerd-b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1.scope. Oct 2 19:22:25.165000 audit[4040]: NETFILTER_CFG table=filter:110 family=2 entries=40 op=nft_register_chain pid=4040 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:25.165000 audit[4040]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7fff0895d500 a2=0 a3=7fff0895d4ec items=0 ppid=3583 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.165000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.174000 audit: BPF prog-id=161 op=LOAD Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4014 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386234373361313034323162633136653334303034383365646338 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4014 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386234373361313034323162633136653334303034383365646338 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit: BPF prog-id=162 op=LOAD Oct 2 19:22:25.175000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000296ae0 items=0 ppid=4014 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386234373361313034323162633136653334303034383365646338 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit: BPF prog-id=163 op=LOAD Oct 2 19:22:25.175000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000296b28 items=0 ppid=4014 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386234373361313034323162633136653334303034383365646338 Oct 2 19:22:25.175000 audit: BPF prog-id=163 op=UNLOAD Oct 2 19:22:25.175000 audit: BPF prog-id=162 op=UNLOAD Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:25.175000 audit: BPF prog-id=164 op=LOAD Oct 2 19:22:25.175000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000296f38 items=0 ppid=4014 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:25.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386234373361313034323162633136653334303034383365646338 Oct 2 19:22:25.204516 env[1304]: time="2023-10-02T19:22:25.204481847Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-5fv7v,Uid:0b1e11e7-20f6-45f0-924b-3a2b08e8189e,Namespace:calico-system,Attempt:1,} returns sandbox id \"b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1\"" Oct 2 19:22:25.206766 env[1304]: time="2023-10-02T19:22:25.206159259Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:22:25.490182 systemd-networkd[1441]: cali4c249a9e69e: Gained IPv6LL Oct 2 19:22:26.321907 systemd-networkd[1441]: cali1930338cb22: Gained IPv6LL Oct 2 19:22:26.812929 env[1304]: time="2023-10-02T19:22:26.812882747Z" level=info msg="StopPodSandbox for \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\"" Oct 2 19:22:26.813536 env[1304]: time="2023-10-02T19:22:26.813148349Z" level=info msg="StopPodSandbox for \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\"" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.887 [INFO][4083] k8s.go 576: Cleaning up netns ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.887 [INFO][4083] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" iface="eth0" netns="/var/run/netns/cni-a7986fbd-cf4c-bc93-0fa2-232f75175c20" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.887 [INFO][4083] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" iface="eth0" netns="/var/run/netns/cni-a7986fbd-cf4c-bc93-0fa2-232f75175c20" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.888 [INFO][4083] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" iface="eth0" netns="/var/run/netns/cni-a7986fbd-cf4c-bc93-0fa2-232f75175c20" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.888 [INFO][4083] k8s.go 583: Releasing IP address(es) ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.888 [INFO][4083] utils.go 196: Calico CNI releasing IP address ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.918 [INFO][4105] ipam_plugin.go 416: Releasing address using handleID ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:26.930214 env[1304]: time="2023-10-02T19:22:26Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:26.930214 env[1304]: time="2023-10-02T19:22:26Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.926 [WARNING][4105] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.927 [INFO][4105] ipam_plugin.go 444: Releasing address using workloadID ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:26.930214 env[1304]: time="2023-10-02T19:22:26Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:26.930214 env[1304]: 2023-10-02 19:22:26.928 [INFO][4083] k8s.go 589: Teardown processing complete. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:26.933534 systemd[1]: run-netns-cni\x2da7986fbd\x2dcf4c\x2dbc93\x2d0fa2\x2d232f75175c20.mount: Deactivated successfully. Oct 2 19:22:26.935444 env[1304]: time="2023-10-02T19:22:26.935405019Z" level=info msg="TearDown network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\" successfully" Oct 2 19:22:26.935679 env[1304]: time="2023-10-02T19:22:26.935632021Z" level=info msg="StopPodSandbox for \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\" returns successfully" Oct 2 19:22:26.937180 env[1304]: time="2023-10-02T19:22:26.937155732Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-mhjlk,Uid:fe699508-8c25-47a9-aced-17181d2deff9,Namespace:kube-system,Attempt:1,}" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.879 [INFO][4091] k8s.go 576: Cleaning up netns ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.879 [INFO][4091] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" iface="eth0" netns="/var/run/netns/cni-55f17ed5-969a-dbdd-2f22-f1a94d899517" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.880 [INFO][4091] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" iface="eth0" netns="/var/run/netns/cni-55f17ed5-969a-dbdd-2f22-f1a94d899517" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.880 [INFO][4091] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" iface="eth0" netns="/var/run/netns/cni-55f17ed5-969a-dbdd-2f22-f1a94d899517" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.880 [INFO][4091] k8s.go 583: Releasing IP address(es) ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.880 [INFO][4091] utils.go 196: Calico CNI releasing IP address ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.926 [INFO][4100] ipam_plugin.go 416: Releasing address using handleID ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:26.940779 env[1304]: time="2023-10-02T19:22:26Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:26.940779 env[1304]: time="2023-10-02T19:22:26Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.937 [WARNING][4100] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.937 [INFO][4100] ipam_plugin.go 444: Releasing address using workloadID ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:26.940779 env[1304]: time="2023-10-02T19:22:26Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:26.940779 env[1304]: 2023-10-02 19:22:26.939 [INFO][4091] k8s.go 589: Teardown processing complete. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:26.944241 env[1304]: time="2023-10-02T19:22:26.943224975Z" level=info msg="TearDown network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\" successfully" Oct 2 19:22:26.944241 env[1304]: time="2023-10-02T19:22:26.943252575Z" level=info msg="StopPodSandbox for \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\" returns successfully" Oct 2 19:22:26.943005 systemd[1]: run-netns-cni\x2d55f17ed5\x2d969a\x2ddbdd\x2d2f22\x2df1a94d899517.mount: Deactivated successfully. Oct 2 19:22:26.947032 env[1304]: time="2023-10-02T19:22:26.947002902Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vqlk8,Uid:16349b50-b7cd-4368-9440-00bbbff6973a,Namespace:calico-system,Attempt:1,}" Oct 2 19:22:27.202277 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:22:27.202408 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali89e48ea72c9: link becomes ready Oct 2 19:22:27.212832 systemd-networkd[1441]: cali89e48ea72c9: Link UP Oct 2 19:22:27.212840 systemd-networkd[1441]: cali89e48ea72c9: Gained carrier Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.105 [INFO][4125] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0 coredns-5dd5756b68- kube-system fe699508-8c25-47a9-aced-17181d2deff9 739 0 2023-10-02 19:21:46 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.0-a-2ed8b7e9a3 coredns-5dd5756b68-mhjlk eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali89e48ea72c9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.105 [INFO][4125] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.150 [INFO][4140] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" HandleID="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.159 [INFO][4140] ipam_plugin.go 269: Auto assigning IP ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" HandleID="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00052d550), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.0-a-2ed8b7e9a3", "pod":"coredns-5dd5756b68-mhjlk", "timestamp":"2023-10-02 19:22:27.150225739 +0000 UTC"}, Hostname:"ci-3510.3.0-a-2ed8b7e9a3", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:27.231735 env[1304]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.231735 env[1304]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.160 [INFO][4140] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-2ed8b7e9a3' Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.161 [INFO][4140] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.165 [INFO][4140] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.172 [INFO][4140] ipam.go 489: Trying affinity for 192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.175 [INFO][4140] ipam.go 155: Attempting to load block cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.180 [INFO][4140] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.180 [INFO][4140] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.2.128/26 handle="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.181 [INFO][4140] ipam.go 1682: Creating new handle: k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369 Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.185 [INFO][4140] ipam.go 1203: Writing block in order to claim IPs block=192.168.2.128/26 handle="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.189 [INFO][4140] ipam.go 1216: Successfully claimed IPs: [192.168.2.131/26] block=192.168.2.128/26 handle="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.189 [INFO][4140] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.2.131/26] handle="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.231735 env[1304]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.231735 env[1304]: 2023-10-02 19:22:27.189 [INFO][4140] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.2.131/26] IPv6=[] ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" HandleID="k8s-pod-network.33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:27.232753 env[1304]: 2023-10-02 19:22:27.191 [INFO][4125] k8s.go 383: Populated endpoint ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"fe699508-8c25-47a9-aced-17181d2deff9", ResourceVersion:"739", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"", Pod:"coredns-5dd5756b68-mhjlk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali89e48ea72c9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.232753 env[1304]: 2023-10-02 19:22:27.191 [INFO][4125] k8s.go 384: Calico CNI using IPs: [192.168.2.131/32] ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:27.232753 env[1304]: 2023-10-02 19:22:27.191 [INFO][4125] dataplane_linux.go 68: Setting the host side veth name to cali89e48ea72c9 ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:27.232753 env[1304]: 2023-10-02 19:22:27.204 [INFO][4125] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:27.232753 env[1304]: 2023-10-02 19:22:27.211 [INFO][4125] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"fe699508-8c25-47a9-aced-17181d2deff9", ResourceVersion:"739", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369", Pod:"coredns-5dd5756b68-mhjlk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali89e48ea72c9", MAC:"be:10:aa:d4:33:ad", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.232753 env[1304]: 2023-10-02 19:22:27.230 [INFO][4125] k8s.go 489: Wrote updated endpoint to datastore ContainerID="33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369" Namespace="kube-system" Pod="coredns-5dd5756b68-mhjlk" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:27.253694 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali68179537df7: link becomes ready Oct 2 19:22:27.270000 audit[4183]: NETFILTER_CFG table=filter:111 family=2 entries=34 op=nft_register_chain pid=4183 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:27.270000 audit[4183]: SYSCALL arch=c000003e syscall=46 success=yes exit=17900 a0=3 a1=7ffd4adb0f30 a2=0 a3=7ffd4adb0f1c items=0 ppid=3583 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.270000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:27.272554 systemd-networkd[1441]: cali68179537df7: Link UP Oct 2 19:22:27.272562 systemd-networkd[1441]: cali68179537df7: Gained carrier Oct 2 19:22:27.278652 env[1304]: time="2023-10-02T19:22:27.262384930Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:27.278652 env[1304]: time="2023-10-02T19:22:27.262423330Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:27.278652 env[1304]: time="2023-10-02T19:22:27.262437030Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:27.278652 env[1304]: time="2023-10-02T19:22:27.262583831Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369 pid=4174 runtime=io.containerd.runc.v2 Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.106 [INFO][4112] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0 csi-node-driver- calico-system 16349b50-b7cd-4368-9440-00bbbff6973a 738 0 2023-10-02 19:22:11 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6b49688c47 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510.3.0-a-2ed8b7e9a3 csi-node-driver-vqlk8 eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali68179537df7 [] []}} ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.106 [INFO][4112] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.166 [INFO][4141] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" HandleID="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.180 [INFO][4141] ipam_plugin.go 269: Auto assigning IP ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" HandleID="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000495130), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.0-a-2ed8b7e9a3", "pod":"csi-node-driver-vqlk8", "timestamp":"2023-10-02 19:22:27.166360053 +0000 UTC"}, Hostname:"ci-3510.3.0-a-2ed8b7e9a3", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:27.296855 env[1304]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.296855 env[1304]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.189 [INFO][4141] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-2ed8b7e9a3' Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.203 [INFO][4141] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.207 [INFO][4141] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.221 [INFO][4141] ipam.go 489: Trying affinity for 192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.223 [INFO][4141] ipam.go 155: Attempting to load block cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.224 [INFO][4141] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.224 [INFO][4141] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.2.128/26 handle="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.226 [INFO][4141] ipam.go 1682: Creating new handle: k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9 Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.236 [INFO][4141] ipam.go 1203: Writing block in order to claim IPs block=192.168.2.128/26 handle="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.243 [INFO][4141] ipam.go 1216: Successfully claimed IPs: [192.168.2.132/26] block=192.168.2.128/26 handle="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.244 [INFO][4141] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.2.132/26] handle="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:27.296855 env[1304]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.296855 env[1304]: 2023-10-02 19:22:27.244 [INFO][4141] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.2.132/26] IPv6=[] ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" HandleID="k8s-pod-network.16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:27.297844 env[1304]: 2023-10-02 19:22:27.246 [INFO][4112] k8s.go 383: Populated endpoint ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"16349b50-b7cd-4368-9440-00bbbff6973a", ResourceVersion:"738", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"", Pod:"csi-node-driver-vqlk8", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.2.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali68179537df7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.297844 env[1304]: 2023-10-02 19:22:27.246 [INFO][4112] k8s.go 384: Calico CNI using IPs: [192.168.2.132/32] ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:27.297844 env[1304]: 2023-10-02 19:22:27.246 [INFO][4112] dataplane_linux.go 68: Setting the host side veth name to cali68179537df7 ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:27.297844 env[1304]: 2023-10-02 19:22:27.255 [INFO][4112] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:27.297844 env[1304]: 2023-10-02 19:22:27.279 [INFO][4112] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"16349b50-b7cd-4368-9440-00bbbff6973a", ResourceVersion:"738", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9", Pod:"csi-node-driver-vqlk8", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.2.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali68179537df7", MAC:"d6:54:d8:63:9b:25", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.297844 env[1304]: 2023-10-02 19:22:27.292 [INFO][4112] k8s.go 489: Wrote updated endpoint to datastore ContainerID="16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9" Namespace="calico-system" Pod="csi-node-driver-vqlk8" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:27.307648 systemd[1]: Started cri-containerd-33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369.scope. Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.331000 audit: BPF prog-id=165 op=LOAD Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4174 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333363834626164363061613035383339656465333837326461333131 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4174 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333363834626164363061613035383339656465333837326461333131 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.333000 audit: BPF prog-id=166 op=LOAD Oct 2 19:22:27.333000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000397320 items=0 ppid=4174 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333363834626164363061613035383339656465333837326461333131 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.334000 audit: BPF prog-id=167 op=LOAD Oct 2 19:22:27.334000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000397368 items=0 ppid=4174 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333363834626164363061613035383339656465333837326461333131 Oct 2 19:22:27.335000 audit: BPF prog-id=167 op=UNLOAD Oct 2 19:22:27.335000 audit: BPF prog-id=166 op=UNLOAD Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.335000 audit: BPF prog-id=168 op=LOAD Oct 2 19:22:27.335000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000397778 items=0 ppid=4174 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333363834626164363061613035383339656465333837326461333131 Oct 2 19:22:27.345716 env[1304]: time="2023-10-02T19:22:27.344775511Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:27.345716 env[1304]: time="2023-10-02T19:22:27.344827411Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:27.345716 env[1304]: time="2023-10-02T19:22:27.344842511Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:27.345716 env[1304]: time="2023-10-02T19:22:27.345090013Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9 pid=4220 runtime=io.containerd.runc.v2 Oct 2 19:22:27.347000 audit[4213]: NETFILTER_CFG table=filter:112 family=2 entries=42 op=nft_register_chain pid=4213 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:27.347000 audit[4213]: SYSCALL arch=c000003e syscall=46 success=yes exit=20696 a0=3 a1=7ffeb0f17d70 a2=0 a3=7ffeb0f17d5c items=0 ppid=3583 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.347000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:27.368132 systemd[1]: Started cri-containerd-16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9.scope. Oct 2 19:22:27.397362 env[1304]: time="2023-10-02T19:22:27.397317982Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-mhjlk,Uid:fe699508-8c25-47a9-aced-17181d2deff9,Namespace:kube-system,Attempt:1,} returns sandbox id \"33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369\"" Oct 2 19:22:27.402787 env[1304]: time="2023-10-02T19:22:27.402755220Z" level=info msg="CreateContainer within sandbox \"33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.404000 audit: BPF prog-id=169 op=LOAD Oct 2 19:22:27.405000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.405000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393231333238626232333763313135383333636566376366343937 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393231333238626232333763313135383333636566376366343937 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.406000 audit: BPF prog-id=170 op=LOAD Oct 2 19:22:27.406000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00021a340 items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393231333238626232333763313135383333636566376366343937 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.407000 audit: BPF prog-id=171 op=LOAD Oct 2 19:22:27.407000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00021a388 items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393231333238626232333763313135383333636566376366343937 Oct 2 19:22:27.408000 audit: BPF prog-id=171 op=UNLOAD Oct 2 19:22:27.408000 audit: BPF prog-id=170 op=UNLOAD Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.408000 audit: BPF prog-id=172 op=LOAD Oct 2 19:22:27.408000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00021a798 items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393231333238626232333763313135383333636566376366343937 Oct 2 19:22:27.421001 env[1304]: time="2023-10-02T19:22:27.420960048Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vqlk8,Uid:16349b50-b7cd-4368-9440-00bbbff6973a,Namespace:calico-system,Attempt:1,} returns sandbox id \"16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9\"" Oct 2 19:22:27.463929 env[1304]: time="2023-10-02T19:22:27.463842351Z" level=info msg="CreateContainer within sandbox \"33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"558dcb6ad2583440c1e6571ced17ac6df68fc21a4313db019b3855bc4118d913\"" Oct 2 19:22:27.467687 env[1304]: time="2023-10-02T19:22:27.464785557Z" level=info msg="StartContainer for \"558dcb6ad2583440c1e6571ced17ac6df68fc21a4313db019b3855bc4118d913\"" Oct 2 19:22:27.484553 systemd[1]: Started cri-containerd-558dcb6ad2583440c1e6571ced17ac6df68fc21a4313db019b3855bc4118d913.scope. Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.499000 audit: BPF prog-id=173 op=LOAD Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4174 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386463623661643235383334343063316536353731636564313761 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4174 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386463623661643235383334343063316536353731636564313761 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit: BPF prog-id=174 op=LOAD Oct 2 19:22:27.500000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021d630 items=0 ppid=4174 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386463623661643235383334343063316536353731636564313761 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.500000 audit: BPF prog-id=175 op=LOAD Oct 2 19:22:27.500000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021d678 items=0 ppid=4174 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386463623661643235383334343063316536353731636564313761 Oct 2 19:22:27.501000 audit: BPF prog-id=175 op=UNLOAD Oct 2 19:22:27.501000 audit: BPF prog-id=174 op=UNLOAD Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:27.501000 audit: BPF prog-id=176 op=LOAD Oct 2 19:22:27.501000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021da88 items=0 ppid=4174 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:27.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386463623661643235383334343063316536353731636564313761 Oct 2 19:22:27.523804 env[1304]: time="2023-10-02T19:22:27.523760473Z" level=info msg="StartContainer for \"558dcb6ad2583440c1e6571ced17ac6df68fc21a4313db019b3855bc4118d913\" returns successfully" Oct 2 19:22:28.019038 kubelet[2401]: I1002 19:22:28.019003 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-mhjlk" podStartSLOduration=42.018963765 podCreationTimestamp="2023-10-02 19:21:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:22:28.018415661 +0000 UTC m=+54.362511349" watchObservedRunningTime="2023-10-02 19:22:28.018963765 +0000 UTC m=+54.363059453" Oct 2 19:22:28.036000 audit[4305]: NETFILTER_CFG table=filter:113 family=2 entries=8 op=nft_register_rule pid=4305 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:28.036000 audit[4305]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7fff213207b0 a2=0 a3=7fff2132079c items=0 ppid=2574 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:28.036000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:28.038000 audit[4305]: NETFILTER_CFG table=nat:114 family=2 entries=44 op=nft_register_rule pid=4305 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:28.038000 audit[4305]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7fff213207b0 a2=0 a3=7fff2132079c items=0 ppid=2574 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:28.038000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:28.051000 audit[4307]: NETFILTER_CFG table=filter:115 family=2 entries=8 op=nft_register_rule pid=4307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:28.051000 audit[4307]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffc31d89050 a2=0 a3=7ffc31d8903c items=0 ppid=2574 pid=4307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:28.051000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:28.059000 audit[4307]: NETFILTER_CFG table=nat:116 family=2 entries=56 op=nft_register_chain pid=4307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:28.059000 audit[4307]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7ffc31d89050 a2=0 a3=7ffc31d8903c items=0 ppid=2574 pid=4307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:28.059000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:29.201856 systemd-networkd[1441]: cali89e48ea72c9: Gained IPv6LL Oct 2 19:22:29.202194 systemd-networkd[1441]: cali68179537df7: Gained IPv6LL Oct 2 19:22:29.681287 env[1304]: time="2023-10-02T19:22:29.681239046Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:29.688361 env[1304]: time="2023-10-02T19:22:29.688325795Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:29.692657 env[1304]: time="2023-10-02T19:22:29.692629524Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:29.697454 env[1304]: time="2023-10-02T19:22:29.697427258Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:29.698094 env[1304]: time="2023-10-02T19:22:29.698064962Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78\"" Oct 2 19:22:29.700087 env[1304]: time="2023-10-02T19:22:29.699873475Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:22:29.701185 env[1304]: time="2023-10-02T19:22:29.701151984Z" level=info msg="CreateContainer within sandbox \"b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 19:22:29.732450 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3277159869.mount: Deactivated successfully. Oct 2 19:22:29.746437 env[1304]: time="2023-10-02T19:22:29.746395997Z" level=info msg="CreateContainer within sandbox \"b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2\"" Oct 2 19:22:29.748651 env[1304]: time="2023-10-02T19:22:29.748609612Z" level=info msg="StartContainer for \"b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2\"" Oct 2 19:22:29.755689 kernel: kauditd_printk_skb: 368 callbacks suppressed Oct 2 19:22:29.755751 kernel: audit: type=1400 audit(1696274549.749:1299): avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:29.749000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:29.749000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001b734d0 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:29.784856 systemd[1]: Started cri-containerd-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2.scope. Oct 2 19:22:29.794080 kernel: audit: type=1300 audit(1696274549.749:1299): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001b734d0 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:29.799755 kernel: audit: type=1327 audit(1696274549.749:1299): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:29.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:29.749000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:29.838683 kernel: audit: type=1400 audit(1696274549.749:1300): avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:29.749000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012cb540 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:29.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:29.890451 kernel: audit: type=1300 audit(1696274549.749:1300): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012cb540 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:29.890563 kernel: audit: type=1327 audit(1696274549.749:1300): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:29.890638 kernel: audit: type=1400 audit(1696274549.819:1301): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.903682 kernel: audit: type=1400 audit(1696274549.819:1302): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.903731 kernel: audit: type=1400 audit(1696274549.819:1303): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.928648 kernel: audit: type=1400 audit(1696274549.819:1304): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit: BPF prog-id=177 op=LOAD Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4014 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:29.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234326166623837333637373433643239323832303464393139303563 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4014 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:29.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234326166623837333637373433643239323832303464393139303563 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.819000 audit: BPF prog-id=178 op=LOAD Oct 2 19:22:29.819000 audit[4328]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000256ff0 items=0 ppid=4014 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:29.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234326166623837333637373433643239323832303464393139303563 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.820000 audit: BPF prog-id=179 op=LOAD Oct 2 19:22:29.820000 audit[4328]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000257038 items=0 ppid=4014 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:29.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234326166623837333637373433643239323832303464393139303563 Oct 2 19:22:29.837000 audit: BPF prog-id=179 op=UNLOAD Oct 2 19:22:29.837000 audit: BPF prog-id=178 op=UNLOAD Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { perfmon } for pid=4328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit[4328]: AVC avc: denied { bpf } for pid=4328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:29.837000 audit: BPF prog-id=180 op=LOAD Oct 2 19:22:29.837000 audit[4328]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000257448 items=0 ppid=4014 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:29.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234326166623837333637373433643239323832303464393139303563 Oct 2 19:22:29.935865 env[1304]: time="2023-10-02T19:22:29.934360200Z" level=info msg="StartContainer for \"b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2\" returns successfully" Oct 2 19:22:29.985109 env[1304]: time="2023-10-02T19:22:29.984934750Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:29.992930 env[1304]: time="2023-10-02T19:22:29.992879906Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:29.993144 kubelet[2401]: E1002 19:22:29.993114 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:29.993476 kubelet[2401]: E1002 19:22:29.993158 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:29.993525 kubelet[2401]: E1002 19:22:29.993308 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:29.994282 env[1304]: time="2023-10-02T19:22:29.994252515Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:22:30.069795 kubelet[2401]: I1002 19:22:30.069764 2401 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-74b9887bb6-5fv7v" podStartSLOduration=33.577008426 podCreationTimestamp="2023-10-02 19:21:52 +0000 UTC" firstStartedPulling="2023-10-02 19:22:25.205789257 +0000 UTC m=+51.549884845" lastFinishedPulling="2023-10-02 19:22:29.698484665 +0000 UTC m=+56.042580253" observedRunningTime="2023-10-02 19:22:30.033831387 +0000 UTC m=+56.377926975" watchObservedRunningTime="2023-10-02 19:22:30.069703834 +0000 UTC m=+56.413799522" Oct 2 19:22:30.228000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:30.228000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4862 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:30.228000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0080b2c90 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:22:30.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:22:30.228000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c007f1daa0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:22:30.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:22:30.232000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:30.232000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0080b2e70 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:22:30.232000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:22:30.237000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:30.237000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c006fdf5a0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:22:30.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:22:30.237000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:30.237000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c0080b2ea0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:22:30.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:22:30.255000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:30.255000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c006fdf5c0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:22:30.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:22:30.297176 env[1304]: time="2023-10-02T19:22:30.297012696Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:30.302141 env[1304]: time="2023-10-02T19:22:30.302095831Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:30.302388 kubelet[2401]: E1002 19:22:30.302365 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:30.302502 kubelet[2401]: E1002 19:22:30.302411 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:30.302556 kubelet[2401]: E1002 19:22:30.302523 2401 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:30.302697 kubelet[2401]: E1002 19:22:30.302595 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:22:31.018726 kubelet[2401]: E1002 19:22:31.018657 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:22:31.325086 kubelet[2401]: I1002 19:22:31.324026 2401 topology_manager.go:215] "Topology Admit Handler" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" podNamespace="calico-apiserver" podName="calico-apiserver-647bdd45fd-s9rwq" Oct 2 19:22:31.330188 kubelet[2401]: W1002 19:22:31.330162 2401 reflector.go:535] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:22:31.331454 systemd[1]: Created slice kubepods-besteffort-podb12dc933_4620_4514_9d2b_b547d561a8cc.slice. Oct 2 19:22:31.332637 kubelet[2401]: E1002 19:22:31.332622 2401 reflector.go:147] object-"calico-apiserver"/"calico-apiserver-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:22:31.333294 kubelet[2401]: W1002 19:22:31.333276 2401 reflector.go:535] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:22:31.335693 kubelet[2401]: E1002 19:22:31.335650 2401 reflector.go:147] object-"calico-apiserver"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.0-a-2ed8b7e9a3" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.0-a-2ed8b7e9a3' and this object Oct 2 19:22:31.338520 kubelet[2401]: I1002 19:22:31.338488 2401 topology_manager.go:215] "Topology Admit Handler" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" podNamespace="calico-apiserver" podName="calico-apiserver-647bdd45fd-zjdbr" Oct 2 19:22:31.343905 systemd[1]: Created slice kubepods-besteffort-pod15655c85_7471_4a8d_9c21_d213e81e6ab4.slice. Oct 2 19:22:31.348838 kubelet[2401]: I1002 19:22:31.348818 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/b12dc933-4620-4514-9d2b-b547d561a8cc-calico-apiserver-certs\") pod \"calico-apiserver-647bdd45fd-s9rwq\" (UID: \"b12dc933-4620-4514-9d2b-b547d561a8cc\") " pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" Oct 2 19:22:31.348998 kubelet[2401]: I1002 19:22:31.348984 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gbgmn\" (UniqueName: \"kubernetes.io/projected/b12dc933-4620-4514-9d2b-b547d561a8cc-kube-api-access-gbgmn\") pod \"calico-apiserver-647bdd45fd-s9rwq\" (UID: \"b12dc933-4620-4514-9d2b-b547d561a8cc\") " pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" Oct 2 19:22:31.404000 audit[4380]: NETFILTER_CFG table=filter:117 family=2 entries=9 op=nft_register_rule pid=4380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:31.404000 audit[4380]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffe7b395530 a2=0 a3=7ffe7b39551c items=0 ppid=2574 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:31.404000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:31.407000 audit[4380]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=4380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:31.407000 audit[4380]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffe7b395530 a2=0 a3=7ffe7b39551c items=0 ppid=2574 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:31.407000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:31.450144 kubelet[2401]: I1002 19:22:31.450111 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/15655c85-7471-4a8d-9c21-d213e81e6ab4-calico-apiserver-certs\") pod \"calico-apiserver-647bdd45fd-zjdbr\" (UID: \"15655c85-7471-4a8d-9c21-d213e81e6ab4\") " pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" Oct 2 19:22:31.450399 kubelet[2401]: I1002 19:22:31.450384 2401 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-trc6r\" (UniqueName: \"kubernetes.io/projected/15655c85-7471-4a8d-9c21-d213e81e6ab4-kube-api-access-trc6r\") pod \"calico-apiserver-647bdd45fd-zjdbr\" (UID: \"15655c85-7471-4a8d-9c21-d213e81e6ab4\") " pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" Oct 2 19:22:31.486000 audit[4383]: NETFILTER_CFG table=filter:119 family=2 entries=10 op=nft_register_rule pid=4383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:31.486000 audit[4383]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffd2a302160 a2=0 a3=7ffd2a30214c items=0 ppid=2574 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:31.486000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:31.512000 audit[4383]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:31.512000 audit[4383]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffd2a302160 a2=0 a3=7ffd2a30214c items=0 ppid=2574 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:31.512000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:31.834203 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.UpRHw7.mount: Deactivated successfully. Oct 2 19:22:32.451862 kubelet[2401]: E1002 19:22:32.451791 2401 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:22:32.452927 kubelet[2401]: E1002 19:22:32.451972 2401 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/b12dc933-4620-4514-9d2b-b547d561a8cc-calico-apiserver-certs podName:b12dc933-4620-4514-9d2b-b547d561a8cc nodeName:}" failed. No retries permitted until 2023-10-02 19:22:32.9519237 +0000 UTC m=+59.296019388 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/b12dc933-4620-4514-9d2b-b547d561a8cc-calico-apiserver-certs") pod "calico-apiserver-647bdd45fd-s9rwq" (UID: "b12dc933-4620-4514-9d2b-b547d561a8cc") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:22:32.552352 kubelet[2401]: E1002 19:22:32.552316 2401 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:22:32.552526 kubelet[2401]: E1002 19:22:32.552405 2401 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/15655c85-7471-4a8d-9c21-d213e81e6ab4-calico-apiserver-certs podName:15655c85-7471-4a8d-9c21-d213e81e6ab4 nodeName:}" failed. No retries permitted until 2023-10-02 19:22:33.052382579 +0000 UTC m=+59.396478267 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/15655c85-7471-4a8d-9c21-d213e81e6ab4-calico-apiserver-certs") pod "calico-apiserver-647bdd45fd-zjdbr" (UID: "15655c85-7471-4a8d-9c21-d213e81e6ab4") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:22:33.137023 env[1304]: time="2023-10-02T19:22:33.136970325Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-647bdd45fd-s9rwq,Uid:b12dc933-4620-4514-9d2b-b547d561a8cc,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:22:33.147967 env[1304]: time="2023-10-02T19:22:33.147926799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-647bdd45fd-zjdbr,Uid:15655c85-7471-4a8d-9c21-d213e81e6ab4,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:22:33.333631 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:22:33.333780 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali584a44866ec: link becomes ready Oct 2 19:22:33.341135 systemd-networkd[1441]: cali584a44866ec: Link UP Oct 2 19:22:33.341144 systemd-networkd[1441]: cali584a44866ec: Gained carrier Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.233 [INFO][4411] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0 calico-apiserver-647bdd45fd- calico-apiserver b12dc933-4620-4514-9d2b-b547d561a8cc 825 0 2023-10-02 19:22:31 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:647bdd45fd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.0-a-2ed8b7e9a3 calico-apiserver-647bdd45fd-s9rwq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali584a44866ec [] []}} ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.234 [INFO][4411] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.286 [INFO][4435] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" HandleID="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.296 [INFO][4435] ipam_plugin.go 269: Auto assigning IP ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" HandleID="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003a7660), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.0-a-2ed8b7e9a3", "pod":"calico-apiserver-647bdd45fd-s9rwq", "timestamp":"2023-10-02 19:22:33.286320127 +0000 UTC"}, Hostname:"ci-3510.3.0-a-2ed8b7e9a3", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:33.352419 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:33.352419 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.296 [INFO][4435] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-2ed8b7e9a3' Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.298 [INFO][4435] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.301 [INFO][4435] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.307 [INFO][4435] ipam.go 489: Trying affinity for 192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.308 [INFO][4435] ipam.go 155: Attempting to load block cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.310 [INFO][4435] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.310 [INFO][4435] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.2.128/26 handle="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.312 [INFO][4435] ipam.go 1682: Creating new handle: k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61 Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.315 [INFO][4435] ipam.go 1203: Writing block in order to claim IPs block=192.168.2.128/26 handle="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.320 [INFO][4435] ipam.go 1216: Successfully claimed IPs: [192.168.2.133/26] block=192.168.2.128/26 handle="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.320 [INFO][4435] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.2.133/26] handle="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.352419 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:33.352419 env[1304]: 2023-10-02 19:22:33.320 [INFO][4435] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.2.133/26] IPv6=[] ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" HandleID="k8s-pod-network.c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" Oct 2 19:22:33.353472 env[1304]: 2023-10-02 19:22:33.321 [INFO][4411] k8s.go 383: Populated endpoint ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0", GenerateName:"calico-apiserver-647bdd45fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"b12dc933-4620-4514-9d2b-b547d561a8cc", ResourceVersion:"825", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"647bdd45fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"", Pod:"calico-apiserver-647bdd45fd-s9rwq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.2.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali584a44866ec", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:33.353472 env[1304]: 2023-10-02 19:22:33.322 [INFO][4411] k8s.go 384: Calico CNI using IPs: [192.168.2.133/32] ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" Oct 2 19:22:33.353472 env[1304]: 2023-10-02 19:22:33.322 [INFO][4411] dataplane_linux.go 68: Setting the host side veth name to cali584a44866ec ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" Oct 2 19:22:33.353472 env[1304]: 2023-10-02 19:22:33.334 [INFO][4411] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" Oct 2 19:22:33.353472 env[1304]: 2023-10-02 19:22:33.338 [INFO][4411] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0", GenerateName:"calico-apiserver-647bdd45fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"b12dc933-4620-4514-9d2b-b547d561a8cc", ResourceVersion:"825", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"647bdd45fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61", Pod:"calico-apiserver-647bdd45fd-s9rwq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.2.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali584a44866ec", MAC:"b6:ab:e2:e0:31:07", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:33.353472 env[1304]: 2023-10-02 19:22:33.350 [INFO][4411] k8s.go 489: Wrote updated endpoint to datastore ContainerID="c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-s9rwq" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--s9rwq-eth0" Oct 2 19:22:33.382320 env[1304]: time="2023-10-02T19:22:33.382254971Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:33.382543 env[1304]: time="2023-10-02T19:22:33.382514472Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:33.382670 env[1304]: time="2023-10-02T19:22:33.382638073Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:33.382902 env[1304]: time="2023-10-02T19:22:33.382871075Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61 pid=4466 runtime=io.containerd.runc.v2 Oct 2 19:22:33.413467 systemd[1]: Started cri-containerd-c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61.scope. Oct 2 19:22:33.434711 systemd-networkd[1441]: calid4511130c07: Link UP Oct 2 19:22:33.434717 systemd-networkd[1441]: calid4511130c07: Gained carrier Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.252 [INFO][4416] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0 calico-apiserver-647bdd45fd- calico-apiserver 15655c85-7471-4a8d-9c21-d213e81e6ab4 829 0 2023-10-02 19:22:31 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:647bdd45fd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.0-a-2ed8b7e9a3 calico-apiserver-647bdd45fd-zjdbr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid4511130c07 [] []}} ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.252 [INFO][4416] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.302 [INFO][4440] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" HandleID="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.311 [INFO][4440] ipam_plugin.go 269: Auto assigning IP ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" HandleID="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001250c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.0-a-2ed8b7e9a3", "pod":"calico-apiserver-647bdd45fd-zjdbr", "timestamp":"2023-10-02 19:22:33.302866338 +0000 UTC"}, Hostname:"ci-3510.3.0-a-2ed8b7e9a3", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:33.452041 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:33.452041 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.321 [INFO][4440] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-2ed8b7e9a3' Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.333 [INFO][4440] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.358 [INFO][4440] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.373 [INFO][4440] ipam.go 489: Trying affinity for 192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.375 [INFO][4440] ipam.go 155: Attempting to load block cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.384 [INFO][4440] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.2.128/26 host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.384 [INFO][4440] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.2.128/26 handle="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.386 [INFO][4440] ipam.go 1682: Creating new handle: k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36 Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.391 [INFO][4440] ipam.go 1203: Writing block in order to claim IPs block=192.168.2.128/26 handle="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.406 [INFO][4440] ipam.go 1216: Successfully claimed IPs: [192.168.2.134/26] block=192.168.2.128/26 handle="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.406 [INFO][4440] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.2.134/26] handle="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" host="ci-3510.3.0-a-2ed8b7e9a3" Oct 2 19:22:33.452041 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:33.452041 env[1304]: 2023-10-02 19:22:33.406 [INFO][4440] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.2.134/26] IPv6=[] ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" HandleID="k8s-pod-network.e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" Oct 2 19:22:33.453001 env[1304]: 2023-10-02 19:22:33.427 [INFO][4416] k8s.go 383: Populated endpoint ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0", GenerateName:"calico-apiserver-647bdd45fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"15655c85-7471-4a8d-9c21-d213e81e6ab4", ResourceVersion:"829", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"647bdd45fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"", Pod:"calico-apiserver-647bdd45fd-zjdbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.2.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4511130c07", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:33.453001 env[1304]: 2023-10-02 19:22:33.427 [INFO][4416] k8s.go 384: Calico CNI using IPs: [192.168.2.134/32] ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" Oct 2 19:22:33.453001 env[1304]: 2023-10-02 19:22:33.427 [INFO][4416] dataplane_linux.go 68: Setting the host side veth name to calid4511130c07 ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" Oct 2 19:22:33.453001 env[1304]: 2023-10-02 19:22:33.428 [INFO][4416] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" Oct 2 19:22:33.453001 env[1304]: 2023-10-02 19:22:33.435 [INFO][4416] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0", GenerateName:"calico-apiserver-647bdd45fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"15655c85-7471-4a8d-9c21-d213e81e6ab4", ResourceVersion:"829", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"647bdd45fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36", Pod:"calico-apiserver-647bdd45fd-zjdbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.2.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4511130c07", MAC:"ea:bb:a1:49:e6:9b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:33.453001 env[1304]: 2023-10-02 19:22:33.446 [INFO][4416] k8s.go 489: Wrote updated endpoint to datastore ContainerID="e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36" Namespace="calico-apiserver" Pod="calico-apiserver-647bdd45fd-zjdbr" WorkloadEndpoint="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--apiserver--647bdd45fd--zjdbr-eth0" Oct 2 19:22:33.440000 audit[4494]: NETFILTER_CFG table=filter:121 family=2 entries=59 op=nft_register_chain pid=4494 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:33.440000 audit[4494]: SYSCALL arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffc6717f960 a2=0 a3=7ffc6717f94c items=0 ppid=3583 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.440000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:33.473869 env[1304]: time="2023-10-02T19:22:33.471886572Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:33.473869 env[1304]: time="2023-10-02T19:22:33.471929772Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:33.473869 env[1304]: time="2023-10-02T19:22:33.471944472Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:33.473869 env[1304]: time="2023-10-02T19:22:33.472070873Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36 pid=4518 runtime=io.containerd.runc.v2 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.484000 audit: BPF prog-id=181 op=LOAD Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4466 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330396464613139383662633261656136336338333961373035666662 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4466 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330396464613139383662633261656136336338333961373035666662 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit: BPF prog-id=182 op=LOAD Oct 2 19:22:33.485000 audit[4479]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003c86f0 items=0 ppid=4466 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330396464613139383662633261656136336338333961373035666662 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit: BPF prog-id=183 op=LOAD Oct 2 19:22:33.485000 audit[4479]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003c8738 items=0 ppid=4466 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330396464613139383662633261656136336338333961373035666662 Oct 2 19:22:33.485000 audit: BPF prog-id=183 op=UNLOAD Oct 2 19:22:33.485000 audit: BPF prog-id=182 op=UNLOAD Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { perfmon } for pid=4479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit[4479]: AVC avc: denied { bpf } for pid=4479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.485000 audit: BPF prog-id=184 op=LOAD Oct 2 19:22:33.485000 audit[4479]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003c8b48 items=0 ppid=4466 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330396464613139383662633261656136336338333961373035666662 Oct 2 19:22:33.491000 audit[4532]: NETFILTER_CFG table=filter:122 family=2 entries=50 op=nft_register_chain pid=4532 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:33.491000 audit[4532]: SYSCALL arch=c000003e syscall=46 success=yes exit=24496 a0=3 a1=7ffec3a29cc0 a2=0 a3=7ffec3a29cac items=0 ppid=3583 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.491000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:33.505841 systemd[1]: Started cri-containerd-e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36.scope. Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.521000 audit: BPF prog-id=185 op=LOAD Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4518 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536656464393363346635363232653035623563353161373639356366 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4518 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536656464393363346635363232653035623563353161373639356366 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit: BPF prog-id=186 op=LOAD Oct 2 19:22:33.522000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c6570 items=0 ppid=4518 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536656464393363346635363232653035623563353161373639356366 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit: BPF prog-id=187 op=LOAD Oct 2 19:22:33.522000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c65b8 items=0 ppid=4518 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536656464393363346635363232653035623563353161373639356366 Oct 2 19:22:33.522000 audit: BPF prog-id=187 op=UNLOAD Oct 2 19:22:33.522000 audit: BPF prog-id=186 op=UNLOAD Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:33.522000 audit: BPF prog-id=188 op=LOAD Oct 2 19:22:33.522000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c69c8 items=0 ppid=4518 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:33.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536656464393363346635363232653035623563353161373639356366 Oct 2 19:22:33.546210 env[1304]: time="2023-10-02T19:22:33.546169470Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-647bdd45fd-s9rwq,Uid:b12dc933-4620-4514-9d2b-b547d561a8cc,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"c09dda1986bc2aea63c839a705ffbb2b8773f617b578bd29e01db13a914e6a61\"" Oct 2 19:22:33.548465 env[1304]: time="2023-10-02T19:22:33.548436286Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:33.569445 env[1304]: time="2023-10-02T19:22:33.569406726Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-647bdd45fd-zjdbr,Uid:15655c85-7471-4a8d-9c21-d213e81e6ab4,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"e6edd93c4f5622e05b5c51a7695cf41081da244d04b8f6ea958509a5b1af8f36\"" Oct 2 19:22:33.697000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:33.697000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ffb940 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:33.697000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:33.701000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:33.701000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ffba60 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:33.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:33.701000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:33.701000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c37d60 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:33.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:33.708000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:33.708000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c37e80 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:22:33.708000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:33.817190 env[1304]: time="2023-10-02T19:22:33.817145188Z" level=info msg="StopPodSandbox for \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\"" Oct 2 19:22:33.859265 env[1304]: time="2023-10-02T19:22:33.859201770Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:33.862932 env[1304]: time="2023-10-02T19:22:33.862873695Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:33.867233 kubelet[2401]: E1002 19:22:33.863332 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:33.867233 kubelet[2401]: E1002 19:22:33.863642 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:33.867233 kubelet[2401]: E1002 19:22:33.864280 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gbgmn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-s9rwq_calico-apiserver(b12dc933-4620-4514-9d2b-b547d561a8cc): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:33.867233 kubelet[2401]: E1002 19:22:33.864341 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:22:33.870914 env[1304]: time="2023-10-02T19:22:33.870882949Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.850 [WARNING][4592] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"fe699508-8c25-47a9-aced-17181d2deff9", ResourceVersion:"754", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369", Pod:"coredns-5dd5756b68-mhjlk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali89e48ea72c9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.850 [INFO][4592] k8s.go 576: Cleaning up netns ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.850 [INFO][4592] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" iface="eth0" netns="" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.850 [INFO][4592] k8s.go 583: Releasing IP address(es) ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.851 [INFO][4592] utils.go 196: Calico CNI releasing IP address ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.886 [INFO][4600] ipam_plugin.go 416: Releasing address using handleID ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:33.894250 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:33.894250 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.891 [WARNING][4600] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.891 [INFO][4600] ipam_plugin.go 444: Releasing address using workloadID ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:33.894250 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:33.894250 env[1304]: 2023-10-02 19:22:33.893 [INFO][4592] k8s.go 589: Teardown processing complete. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.894858 env[1304]: time="2023-10-02T19:22:33.894278106Z" level=info msg="TearDown network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\" successfully" Oct 2 19:22:33.894858 env[1304]: time="2023-10-02T19:22:33.894306906Z" level=info msg="StopPodSandbox for \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\" returns successfully" Oct 2 19:22:33.894858 env[1304]: time="2023-10-02T19:22:33.894827309Z" level=info msg="RemovePodSandbox for \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\"" Oct 2 19:22:33.895016 env[1304]: time="2023-10-02T19:22:33.894862910Z" level=info msg="Forcibly stopping sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\"" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.931 [WARNING][4619] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"fe699508-8c25-47a9-aced-17181d2deff9", ResourceVersion:"754", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"33684bad60aa05839ede3872da311d2f1f7c965c61cdb084ced8f278f16d1369", Pod:"coredns-5dd5756b68-mhjlk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali89e48ea72c9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.931 [INFO][4619] k8s.go 576: Cleaning up netns ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.931 [INFO][4619] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" iface="eth0" netns="" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.931 [INFO][4619] k8s.go 583: Releasing IP address(es) ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.931 [INFO][4619] utils.go 196: Calico CNI releasing IP address ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.951 [INFO][4625] ipam_plugin.go 416: Releasing address using handleID ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:33.961451 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:33.961451 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.957 [WARNING][4625] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.957 [INFO][4625] ipam_plugin.go 444: Releasing address using workloadID ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" HandleID="k8s-pod-network.eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--mhjlk-eth0" Oct 2 19:22:33.961451 env[1304]: time="2023-10-02T19:22:33Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:33.961451 env[1304]: 2023-10-02 19:22:33.959 [INFO][4619] k8s.go 589: Teardown processing complete. ContainerID="eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1" Oct 2 19:22:33.961451 env[1304]: time="2023-10-02T19:22:33.960349949Z" level=info msg="TearDown network for sandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\" successfully" Oct 2 19:22:33.987198 env[1304]: time="2023-10-02T19:22:33.987096828Z" level=info msg="RemovePodSandbox \"eeb1a46a0cf272cca221ccf6e54d377bb6f9b06085392b6638f17e2b37cf64f1\" returns successfully" Oct 2 19:22:33.987884 env[1304]: time="2023-10-02T19:22:33.987845833Z" level=info msg="StopPodSandbox for \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\"" Oct 2 19:22:34.026728 kubelet[2401]: E1002 19:22:34.023854 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:22:34.070000 audit[4654]: NETFILTER_CFG table=filter:123 family=2 entries=10 op=nft_register_rule pid=4654 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:34.070000 audit[4654]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffd70067f60 a2=0 a3=7ffd70067f4c items=0 ppid=2574 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:34.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:34.072000 audit[4654]: NETFILTER_CFG table=nat:124 family=2 entries=20 op=nft_register_rule pid=4654 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:34.072000 audit[4654]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffd70067f60 a2=0 a3=7ffd70067f4c items=0 ppid=2574 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:34.072000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.052 [WARNING][4643] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"0b1e11e7-20f6-45f0-924b-3a2b08e8189e", ResourceVersion:"771", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1", Pod:"calico-kube-controllers-74b9887bb6-5fv7v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.2.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1930338cb22", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.052 [INFO][4643] k8s.go 576: Cleaning up netns ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.052 [INFO][4643] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" iface="eth0" netns="" Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.053 [INFO][4643] k8s.go 583: Releasing IP address(es) ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.053 [INFO][4643] utils.go 196: Calico CNI releasing IP address ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.078 [INFO][4650] ipam_plugin.go 416: Releasing address using handleID ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:34.086696 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:34.086696 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.083 [WARNING][4650] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.083 [INFO][4650] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:34.086696 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:34.086696 env[1304]: 2023-10-02 19:22:34.085 [INFO][4643] k8s.go 589: Teardown processing complete. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.087281 env[1304]: time="2023-10-02T19:22:34.086732892Z" level=info msg="TearDown network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\" successfully" Oct 2 19:22:34.087281 env[1304]: time="2023-10-02T19:22:34.086769893Z" level=info msg="StopPodSandbox for \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\" returns successfully" Oct 2 19:22:34.087281 env[1304]: time="2023-10-02T19:22:34.087248396Z" level=info msg="RemovePodSandbox for \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\"" Oct 2 19:22:34.087399 env[1304]: time="2023-10-02T19:22:34.087284696Z" level=info msg="Forcibly stopping sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\"" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.119 [WARNING][4669] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"0b1e11e7-20f6-45f0-924b-3a2b08e8189e", ResourceVersion:"771", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"b18b473a10421bc16e3400483edc8485d180d48715e23d0fef3f147aba4421a1", Pod:"calico-kube-controllers-74b9887bb6-5fv7v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.2.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1930338cb22", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.119 [INFO][4669] k8s.go 576: Cleaning up netns ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.119 [INFO][4669] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" iface="eth0" netns="" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.119 [INFO][4669] k8s.go 583: Releasing IP address(es) ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.119 [INFO][4669] utils.go 196: Calico CNI releasing IP address ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.140 [INFO][4675] ipam_plugin.go 416: Releasing address using handleID ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:34.148680 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:34.148680 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.145 [WARNING][4675] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.145 [INFO][4675] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" HandleID="k8s-pod-network.a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-calico--kube--controllers--74b9887bb6--5fv7v-eth0" Oct 2 19:22:34.148680 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:34.148680 env[1304]: 2023-10-02 19:22:34.147 [INFO][4669] k8s.go 589: Teardown processing complete. ContainerID="a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e" Oct 2 19:22:34.149575 env[1304]: time="2023-10-02T19:22:34.149521610Z" level=info msg="TearDown network for sandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\" successfully" Oct 2 19:22:34.158778 env[1304]: time="2023-10-02T19:22:34.158736272Z" level=info msg="RemovePodSandbox \"a5c13bebb576896f3cb3f67402dc01a44053f88a4941af50f4e4faa4e006859e\" returns successfully" Oct 2 19:22:34.159288 env[1304]: time="2023-10-02T19:22:34.159243275Z" level=info msg="StopPodSandbox for \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\"" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.190 [WARNING][4693] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"4dfd11ec-abb6-46db-903e-d3ccdd7d8264", ResourceVersion:"721", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a", Pod:"coredns-5dd5756b68-gwcf4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c249a9e69e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.191 [INFO][4693] k8s.go 576: Cleaning up netns ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.191 [INFO][4693] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" iface="eth0" netns="" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.191 [INFO][4693] k8s.go 583: Releasing IP address(es) ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.191 [INFO][4693] utils.go 196: Calico CNI releasing IP address ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.209 [INFO][4699] ipam_plugin.go 416: Releasing address using handleID ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:34.218161 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:34.218161 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.214 [WARNING][4699] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.215 [INFO][4699] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:34.218161 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:34.218161 env[1304]: 2023-10-02 19:22:34.217 [INFO][4693] k8s.go 589: Teardown processing complete. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.218973 env[1304]: time="2023-10-02T19:22:34.218904172Z" level=info msg="TearDown network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\" successfully" Oct 2 19:22:34.219105 env[1304]: time="2023-10-02T19:22:34.219084474Z" level=info msg="StopPodSandbox for \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\" returns successfully" Oct 2 19:22:34.220496 env[1304]: time="2023-10-02T19:22:34.220452383Z" level=info msg="RemovePodSandbox for \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\"" Oct 2 19:22:34.220903 env[1304]: time="2023-10-02T19:22:34.220490283Z" level=info msg="Forcibly stopping sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\"" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.251 [WARNING][4717] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"4dfd11ec-abb6-46db-903e-d3ccdd7d8264", ResourceVersion:"721", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"b949c8644bac9789882ae7031d7f17e35e3e29de4a7e05e29b5d2ef0ce77da1a", Pod:"coredns-5dd5756b68-gwcf4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.2.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c249a9e69e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.251 [INFO][4717] k8s.go 576: Cleaning up netns ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.251 [INFO][4717] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" iface="eth0" netns="" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.251 [INFO][4717] k8s.go 583: Releasing IP address(es) ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.251 [INFO][4717] utils.go 196: Calico CNI releasing IP address ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.272 [INFO][4723] ipam_plugin.go 416: Releasing address using handleID ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:34.279752 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:34.279752 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.276 [WARNING][4723] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.277 [INFO][4723] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" HandleID="k8s-pod-network.a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-coredns--5dd5756b68--gwcf4-eth0" Oct 2 19:22:34.279752 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:34.279752 env[1304]: 2023-10-02 19:22:34.278 [INFO][4717] k8s.go 589: Teardown processing complete. ContainerID="a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab" Oct 2 19:22:34.280437 env[1304]: time="2023-10-02T19:22:34.279777878Z" level=info msg="TearDown network for sandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\" successfully" Oct 2 19:22:34.288227 env[1304]: time="2023-10-02T19:22:34.288193334Z" level=info msg="RemovePodSandbox \"a1b7af463b4f470892087012480fe739e481afc94b0948c326c5b412e41b49ab\" returns successfully" Oct 2 19:22:34.288740 env[1304]: time="2023-10-02T19:22:34.288712237Z" level=info msg="StopPodSandbox for \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\"" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.319 [WARNING][4741] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"16349b50-b7cd-4368-9440-00bbbff6973a", ResourceVersion:"788", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9", Pod:"csi-node-driver-vqlk8", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.2.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali68179537df7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.320 [INFO][4741] k8s.go 576: Cleaning up netns ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.320 [INFO][4741] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" iface="eth0" netns="" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.320 [INFO][4741] k8s.go 583: Releasing IP address(es) ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.320 [INFO][4741] utils.go 196: Calico CNI releasing IP address ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.340 [INFO][4748] ipam_plugin.go 416: Releasing address using handleID ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:34.347542 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:34.347542 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.344 [WARNING][4748] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.344 [INFO][4748] ipam_plugin.go 444: Releasing address using workloadID ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:34.347542 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:34.347542 env[1304]: 2023-10-02 19:22:34.346 [INFO][4741] k8s.go 589: Teardown processing complete. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.348104 env[1304]: time="2023-10-02T19:22:34.347559929Z" level=info msg="TearDown network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\" successfully" Oct 2 19:22:34.348104 env[1304]: time="2023-10-02T19:22:34.347591429Z" level=info msg="StopPodSandbox for \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\" returns successfully" Oct 2 19:22:34.348328 env[1304]: time="2023-10-02T19:22:34.348297734Z" level=info msg="RemovePodSandbox for \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\"" Oct 2 19:22:34.348419 env[1304]: time="2023-10-02T19:22:34.348332834Z" level=info msg="Forcibly stopping sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\"" Oct 2 19:22:34.356434 env[1304]: time="2023-10-02T19:22:34.356390088Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:34.360327 env[1304]: time="2023-10-02T19:22:34.360278314Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:34.360555 kubelet[2401]: E1002 19:22:34.360533 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:34.360655 kubelet[2401]: E1002 19:22:34.360579 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:34.360734 kubelet[2401]: E1002 19:22:34.360716 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-trc6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-zjdbr_calico-apiserver(15655c85-7471-4a8d-9c21-d213e81e6ab4): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:34.360878 kubelet[2401]: E1002 19:22:34.360778 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.384 [WARNING][4767] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"16349b50-b7cd-4368-9440-00bbbff6973a", ResourceVersion:"788", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-2ed8b7e9a3", ContainerID:"16921328bb237c115833cef7cf497d9715d28dc71684cf1f7551e897ead7a1b9", Pod:"csi-node-driver-vqlk8", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.2.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali68179537df7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.384 [INFO][4767] k8s.go 576: Cleaning up netns ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.384 [INFO][4767] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" iface="eth0" netns="" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.384 [INFO][4767] k8s.go 583: Releasing IP address(es) ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.384 [INFO][4767] utils.go 196: Calico CNI releasing IP address ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.406 [INFO][4773] ipam_plugin.go 416: Releasing address using handleID ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:34.414695 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:34.414695 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.411 [WARNING][4773] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.411 [INFO][4773] ipam_plugin.go 444: Releasing address using workloadID ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" HandleID="k8s-pod-network.520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Workload="ci--3510.3.0--a--2ed8b7e9a3-k8s-csi--node--driver--vqlk8-eth0" Oct 2 19:22:34.414695 env[1304]: time="2023-10-02T19:22:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:34.414695 env[1304]: 2023-10-02 19:22:34.413 [INFO][4767] k8s.go 589: Teardown processing complete. ContainerID="520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3" Oct 2 19:22:34.415232 env[1304]: time="2023-10-02T19:22:34.415200679Z" level=info msg="TearDown network for sandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\" successfully" Oct 2 19:22:34.424518 env[1304]: time="2023-10-02T19:22:34.424430141Z" level=info msg="RemovePodSandbox \"520027412c985dbfc901ac4fc898ad506e1db4d5cbc7ebc86e2171b2e9e25be3\" returns successfully" Oct 2 19:22:35.032065 kubelet[2401]: E1002 19:22:35.032033 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:22:35.032645 kubelet[2401]: E1002 19:22:35.032617 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:22:35.064000 audit[4783]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=4783 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:35.068892 kernel: kauditd_printk_skb: 221 callbacks suppressed Oct 2 19:22:35.068984 kernel: audit: type=1325 audit(1696274555.064:1373): table=filter:125 family=2 entries=10 op=nft_register_rule pid=4783 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:35.064000 audit[4783]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffdd88a9080 a2=0 a3=7ffdd88a906c items=0 ppid=2574 pid=4783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:35.099795 kernel: audit: type=1300 audit(1696274555.064:1373): arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffdd88a9080 a2=0 a3=7ffdd88a906c items=0 ppid=2574 pid=4783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:35.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:35.109383 kernel: audit: type=1327 audit(1696274555.064:1373): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:35.064000 audit[4783]: NETFILTER_CFG table=nat:126 family=2 entries=20 op=nft_register_rule pid=4783 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:35.119677 kernel: audit: type=1325 audit(1696274555.064:1374): table=nat:126 family=2 entries=20 op=nft_register_rule pid=4783 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:35.064000 audit[4783]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffdd88a9080 a2=0 a3=7ffdd88a906c items=0 ppid=2574 pid=4783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:35.140766 kernel: audit: type=1300 audit(1696274555.064:1374): arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffdd88a9080 a2=0 a3=7ffdd88a906c items=0 ppid=2574 pid=4783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:35.140827 kernel: audit: type=1327 audit(1696274555.064:1374): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:35.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:35.153923 systemd-networkd[1441]: cali584a44866ec: Gained IPv6LL Oct 2 19:22:35.154257 systemd-networkd[1441]: calid4511130c07: Gained IPv6LL Oct 2 19:22:41.821823 env[1304]: time="2023-10-02T19:22:41.821709137Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:22:41.841617 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.HVvZYT.mount: Deactivated successfully. Oct 2 19:22:42.123122 env[1304]: time="2023-10-02T19:22:42.122836342Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:42.126215 env[1304]: time="2023-10-02T19:22:42.126163863Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:42.126439 kubelet[2401]: E1002 19:22:42.126412 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:42.126831 kubelet[2401]: E1002 19:22:42.126459 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:42.126831 kubelet[2401]: E1002 19:22:42.126579 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:42.128049 env[1304]: time="2023-10-02T19:22:42.128013174Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:22:42.430068 env[1304]: time="2023-10-02T19:22:42.429766176Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:42.433831 env[1304]: time="2023-10-02T19:22:42.433782201Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:42.434214 kubelet[2401]: E1002 19:22:42.434190 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:42.434325 kubelet[2401]: E1002 19:22:42.434236 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:42.434377 kubelet[2401]: E1002 19:22:42.434338 2401 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:42.434507 kubelet[2401]: E1002 19:22:42.434403 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:22:43.704850 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.oFnIQK.mount: Deactivated successfully. Oct 2 19:22:48.813369 env[1304]: time="2023-10-02T19:22:48.813321069Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:49.853403 env[1304]: time="2023-10-02T19:22:49.853333372Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:49.856964 env[1304]: time="2023-10-02T19:22:49.856909394Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:49.857274 kubelet[2401]: E1002 19:22:49.857249 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:49.857738 kubelet[2401]: E1002 19:22:49.857299 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:49.858036 kubelet[2401]: E1002 19:22:49.858009 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gbgmn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-s9rwq_calico-apiserver(b12dc933-4620-4514-9d2b-b547d561a8cc): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:49.858222 kubelet[2401]: E1002 19:22:49.858078 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:22:50.814501 env[1304]: time="2023-10-02T19:22:50.814442967Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:51.116032 env[1304]: time="2023-10-02T19:22:51.115893379Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:51.118550 env[1304]: time="2023-10-02T19:22:51.118483195Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:51.118818 kubelet[2401]: E1002 19:22:51.118797 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:51.119148 kubelet[2401]: E1002 19:22:51.118837 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:51.119148 kubelet[2401]: E1002 19:22:51.118968 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-trc6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-zjdbr_calico-apiserver(15655c85-7471-4a8d-9c21-d213e81e6ab4): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:51.119148 kubelet[2401]: E1002 19:22:51.119018 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:22:51.837601 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.HG9k2u.mount: Deactivated successfully. Oct 2 19:22:52.829282 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.ig50dK.mount: Deactivated successfully. Oct 2 19:22:53.699853 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.21sZv8.mount: Deactivated successfully. Oct 2 19:22:53.816046 kubelet[2401]: E1002 19:22:53.816013 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:23:01.813144 kubelet[2401]: E1002 19:23:01.813116 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:23:01.836652 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.dHrHAR.mount: Deactivated successfully. Oct 2 19:23:01.873498 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.vSUkDh.mount: Deactivated successfully. Oct 2 19:23:04.813758 env[1304]: time="2023-10-02T19:23:04.813696278Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:23:05.151275 env[1304]: time="2023-10-02T19:23:05.151126663Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:05.155073 env[1304]: time="2023-10-02T19:23:05.154938957Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:05.155528 kubelet[2401]: E1002 19:23:05.155499 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:23:05.155906 kubelet[2401]: E1002 19:23:05.155549 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:23:05.155906 kubelet[2401]: E1002 19:23:05.155679 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:05.157369 env[1304]: time="2023-10-02T19:23:05.157105054Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:23:05.455946 env[1304]: time="2023-10-02T19:23:05.455795513Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:05.459805 env[1304]: time="2023-10-02T19:23:05.459737707Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:05.460045 kubelet[2401]: E1002 19:23:05.460009 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:23:05.460163 kubelet[2401]: E1002 19:23:05.460069 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:23:05.460237 kubelet[2401]: E1002 19:23:05.460203 2401 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:05.460395 kubelet[2401]: E1002 19:23:05.460287 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:23:05.813729 kubelet[2401]: E1002 19:23:05.813700 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:23:11.835523 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.1jd26b.mount: Deactivated successfully. Oct 2 19:23:12.830528 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.svsjdU.mount: Deactivated successfully. Oct 2 19:23:15.814881 env[1304]: time="2023-10-02T19:23:15.814832799Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:23:16.118967 env[1304]: time="2023-10-02T19:23:16.118810215Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:16.122678 env[1304]: time="2023-10-02T19:23:16.122616713Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:16.122908 kubelet[2401]: E1002 19:23:16.122882 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:16.123352 kubelet[2401]: E1002 19:23:16.122944 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:16.123352 kubelet[2401]: E1002 19:23:16.123098 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gbgmn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-s9rwq_calico-apiserver(b12dc933-4620-4514-9d2b-b547d561a8cc): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:16.123352 kubelet[2401]: E1002 19:23:16.123153 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:23:17.815431 kubelet[2401]: E1002 19:23:17.814988 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:23:17.815973 env[1304]: time="2023-10-02T19:23:17.815115130Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:23:18.132199 env[1304]: time="2023-10-02T19:23:18.132047487Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:18.134952 env[1304]: time="2023-10-02T19:23:18.134906786Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:18.135146 kubelet[2401]: E1002 19:23:18.135114 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:18.135243 kubelet[2401]: E1002 19:23:18.135152 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:18.135295 kubelet[2401]: E1002 19:23:18.135272 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-trc6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-zjdbr_calico-apiserver(15655c85-7471-4a8d-9c21-d213e81e6ab4): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:18.135432 kubelet[2401]: E1002 19:23:18.135319 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:23:21.858895 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.jvGJSl.mount: Deactivated successfully. Oct 2 19:23:23.706971 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.SZ7Xur.mount: Deactivated successfully. Oct 2 19:23:29.750000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:29.784126 kernel: audit: type=1400 audit(1696274609.750:1375): avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:29.784248 kernel: audit: type=1400 audit(1696274609.750:1376): avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:29.784274 kernel: audit: type=1300 audit(1696274609.750:1376): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001dbaa80 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:29.750000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:29.750000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001dbaa80 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:29.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:29.816302 kubelet[2401]: E1002 19:23:29.816284 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:23:29.817657 kubelet[2401]: E1002 19:23:29.817642 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:23:29.822849 kernel: audit: type=1327 audit(1696274609.750:1376): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:29.750000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0005de180 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:29.844735 kernel: audit: type=1300 audit(1696274609.750:1375): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0005de180 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:29.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:29.861792 kernel: audit: type=1327 audit(1696274609.750:1375): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:30.229000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.229000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00f7d4d50 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:23:30.248682 kernel: audit: type=1400 audit(1696274610.229:1377): avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.248726 kernel: audit: type=1300 audit(1696274610.229:1377): arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00f7d4d50 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:23:30.229000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:23:30.285390 kernel: audit: type=1327 audit(1696274610.229:1377): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:23:30.230000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4862 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.301674 kernel: audit: type=1400 audit(1696274610.230:1378): avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4862 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.230000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00f90eae0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:23:30.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:23:30.233000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.233000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00f90eb40 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:23:30.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:23:30.237000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.237000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00f7d5140 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:23:30.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:23:30.237000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.237000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c01155d800 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:23:30.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:23:30.266000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:30.266000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c01155d840 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:23:30.266000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:23:31.854306 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.ENd63n.mount: Deactivated successfully. Oct 2 19:23:32.813633 kubelet[2401]: E1002 19:23:32.813597 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:23:33.700000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:33.700000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d45e60 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:33.700000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:33.700000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:33.700000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d45f80 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:33.701032 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.NKdFBH.mount: Deactivated successfully. Oct 2 19:23:33.701000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:33.701000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001dbb0e0 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:33.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:33.700000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:33.708000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:33.708000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001dbb200 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:23:33.708000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:41.819744 kubelet[2401]: E1002 19:23:41.819702 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:23:41.838592 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.HVSSOb.mount: Deactivated successfully. Oct 2 19:23:41.869235 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.bya77W.mount: Deactivated successfully. Oct 2 19:23:42.001357 update_engine[1292]: I1002 19:23:42.001297 1292 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:23:42.001357 update_engine[1292]: I1002 19:23:42.001349 1292 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:23:42.001868 update_engine[1292]: I1002 19:23:42.001490 1292 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:23:42.002023 update_engine[1292]: I1002 19:23:42.001993 1292 omaha_request_params.cc:62] Current group set to lts Oct 2 19:23:42.002342 update_engine[1292]: I1002 19:23:42.002152 1292 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:23:42.002342 update_engine[1292]: I1002 19:23:42.002164 1292 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:23:42.002342 update_engine[1292]: I1002 19:23:42.002183 1292 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:23:42.002342 update_engine[1292]: I1002 19:23:42.002219 1292 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:23:42.002342 update_engine[1292]: I1002 19:23:42.002283 1292 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:23:42.002342 update_engine[1292]: I1002 19:23:42.002290 1292 omaha_request_action.cc:269] Request: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: Oct 2 19:23:42.002342 update_engine[1292]: I1002 19:23:42.002295 1292 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:23:42.003208 locksmithd[1378]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:23:42.003613 update_engine[1292]: I1002 19:23:42.003587 1292 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:23:42.003877 update_engine[1292]: I1002 19:23:42.003827 1292 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:23:43.000471 update_engine[1292]: I1002 19:23:43.000430 1292 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:23:43.000726 update_engine[1292]: I1002 19:23:43.000705 1292 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:23:43.000896 update_engine[1292]: I1002 19:23:43.000876 1292 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:23:43.089546 update_engine[1292]: I1002 19:23:43.089481 1292 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:23:43.091125 update_engine[1292]: I1002 19:23:43.091089 1292 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:23:43.091125 update_engine[1292]: I1002 19:23:43.091109 1292 omaha_request_action.cc:619] Omaha request response: Oct 2 19:23:43.091125 update_engine[1292]: Oct 2 19:23:43.125732 update_engine[1292]: I1002 19:23:43.125699 1292 omaha_request_action.cc:409] No update. Oct 2 19:23:43.125732 update_engine[1292]: I1002 19:23:43.125731 1292 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:23:43.125918 update_engine[1292]: I1002 19:23:43.125739 1292 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:23:43.125918 update_engine[1292]: I1002 19:23:43.125746 1292 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:23:43.125918 update_engine[1292]: I1002 19:23:43.125751 1292 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:23:43.125918 update_engine[1292]: I1002 19:23:43.125756 1292 update_attempter.cc:302] Processing Done. Oct 2 19:23:43.125918 update_engine[1292]: I1002 19:23:43.125777 1292 update_attempter.cc:338] No update. Oct 2 19:23:43.125918 update_engine[1292]: I1002 19:23:43.125790 1292 update_check_scheduler.cc:74] Next update check in 49m44s Oct 2 19:23:43.126294 locksmithd[1378]: LastCheckedTime=1696274623 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:23:43.702033 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.lwWBZl.mount: Deactivated successfully. Oct 2 19:23:44.813331 kubelet[2401]: E1002 19:23:44.813301 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:23:45.813499 kubelet[2401]: E1002 19:23:45.813467 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:23:51.837164 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.AuZEVV.mount: Deactivated successfully. Oct 2 19:23:52.828489 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.6uB2Rq.mount: Deactivated successfully. Oct 2 19:23:55.813682 env[1304]: time="2023-10-02T19:23:55.813613243Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:23:56.102708 env[1304]: time="2023-10-02T19:23:56.102528730Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:56.106357 env[1304]: time="2023-10-02T19:23:56.106218036Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:56.106593 kubelet[2401]: E1002 19:23:56.106564 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:23:56.107073 kubelet[2401]: E1002 19:23:56.106616 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:23:56.107212 kubelet[2401]: E1002 19:23:56.107183 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:56.114561 env[1304]: time="2023-10-02T19:23:56.114525150Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:23:56.421974 env[1304]: time="2023-10-02T19:23:56.421802076Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:56.431341 env[1304]: time="2023-10-02T19:23:56.431291692Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:56.431714 kubelet[2401]: E1002 19:23:56.431591 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:23:56.431714 kubelet[2401]: E1002 19:23:56.431636 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:23:56.431859 kubelet[2401]: E1002 19:23:56.431763 2401 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-n9bdw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-vqlk8_calico-system(16349b50-b7cd-4368-9440-00bbbff6973a): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:56.431859 kubelet[2401]: E1002 19:23:56.431830 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:23:56.814325 env[1304]: time="2023-10-02T19:23:56.814002548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:23:56.814869 kubelet[2401]: E1002 19:23:56.814843 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:23:57.111910 env[1304]: time="2023-10-02T19:23:57.111767662Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:57.115184 env[1304]: time="2023-10-02T19:23:57.115110268Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:57.115516 kubelet[2401]: E1002 19:23:57.115491 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:57.115969 kubelet[2401]: E1002 19:23:57.115545 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:57.115969 kubelet[2401]: E1002 19:23:57.115717 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gbgmn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-s9rwq_calico-apiserver(b12dc933-4620-4514-9d2b-b547d561a8cc): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:57.115969 kubelet[2401]: E1002 19:23:57.115777 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:24:07.814114 env[1304]: time="2023-10-02T19:24:07.814056334Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:24:08.101169 env[1304]: time="2023-10-02T19:24:08.100877147Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:24:08.104324 env[1304]: time="2023-10-02T19:24:08.104274154Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:24:08.104619 kubelet[2401]: E1002 19:24:08.104591 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:24:08.105068 kubelet[2401]: E1002 19:24:08.104642 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:24:08.105068 kubelet[2401]: E1002 19:24:08.104864 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-trc6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-zjdbr_calico-apiserver(15655c85-7471-4a8d-9c21-d213e81e6ab4): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:24:08.105068 kubelet[2401]: E1002 19:24:08.104930 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:24:09.815160 kubelet[2401]: E1002 19:24:09.815127 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:24:11.834047 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.C8bySH.mount: Deactivated successfully. Oct 2 19:24:11.867564 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.wuM4xp.mount: Deactivated successfully. Oct 2 19:24:12.813393 kubelet[2401]: E1002 19:24:12.813357 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:24:13.703374 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.NP7zkB.mount: Deactivated successfully. Oct 2 19:24:19.814553 kubelet[2401]: E1002 19:24:19.814377 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:24:21.834736 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.fdD7aL.mount: Deactivated successfully. Oct 2 19:24:22.828395 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.8GO1ee.mount: Deactivated successfully. Oct 2 19:24:23.703094 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.JE6jPz.mount: Deactivated successfully. Oct 2 19:24:23.817620 kubelet[2401]: E1002 19:24:23.817093 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:24:25.815284 kubelet[2401]: E1002 19:24:25.815252 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:24:29.751000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:29.756819 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:24:29.756926 kernel: audit: type=1400 audit(1696274669.751:1387): avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:29.751000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:29.789686 kernel: audit: type=1400 audit(1696274669.751:1388): avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:29.789756 kernel: audit: type=1300 audit(1696274669.751:1387): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8c460 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:29.751000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8c460 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:29.751000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:29.811757 kernel: audit: type=1327 audit(1696274669.751:1387): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:29.751000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0005438f0 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:29.828680 kernel: audit: type=1300 audit(1696274669.751:1388): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0005438f0 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:29.751000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:29.866938 kernel: audit: type=1327 audit(1696274669.751:1388): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:30.230000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.230000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c000adc6c0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:24:30.268847 kernel: audit: type=1400 audit(1696274670.230:1389): avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.268934 kernel: audit: type=1300 audit(1696274670.230:1389): arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c000adc6c0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:24:30.268958 kernel: audit: type=1327 audit(1696274670.230:1389): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:24:30.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:24:30.231000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4862 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.303574 kernel: audit: type=1400 audit(1696274670.231:1390): avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4862 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.231000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c000adccc0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:24:30.231000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:24:30.233000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.233000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c000addaa0 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:24:30.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:24:30.238000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.238000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c003b3a500 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:24:30.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:24:30.238000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4866 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.238000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c00842cd50 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:24:30.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:24:30.267000 audit[2226]: AVC avc: denied { watch } for pid=2226 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:30.267000 audit[2226]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c00761fd20 a2=fc6 a3=0 items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c648 key=(null) Oct 2 19:24:30.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:24:31.836784 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.paKMKc.mount: Deactivated successfully. Oct 2 19:24:33.702554 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.sQLZNQ.mount: Deactivated successfully. Oct 2 19:24:33.701000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:33.701000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8c920 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:33.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:33.701000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:33.701000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8c940 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:33.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:33.703000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:33.703000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8cb80 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:33.703000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:33.709000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4851 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:33.709000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00103f060 a2=fc6 a3=0 items=0 ppid=2127 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c470 key=(null) Oct 2 19:24:33.709000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:33.814033 kubelet[2401]: E1002 19:24:33.813742 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:24:36.236892 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:24:36.237005 kernel: audit: type=1130 audit(1696274676.230:1399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.18:22-10.200.12.6:50590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:36.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.18:22-10.200.12.6:50590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:36.231819 systemd[1]: Started sshd@7-10.200.8.18:22-10.200.12.6:50590.service. Oct 2 19:24:36.876000 audit[5624]: USER_ACCT pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:36.878447 sshd[5624]: Accepted publickey for core from 10.200.12.6 port 50590 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:24:36.896000 audit[5624]: CRED_ACQ pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:36.898453 sshd[5624]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:24:36.904357 systemd[1]: Started session-10.scope. Oct 2 19:24:36.904843 systemd-logind[1288]: New session 10 of user core. Oct 2 19:24:36.915210 kernel: audit: type=1101 audit(1696274676.876:1400): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:36.915305 kernel: audit: type=1103 audit(1696274676.896:1401): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:36.915684 kernel: audit: type=1006 audit(1696274676.896:1402): pid=5624 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:24:36.896000 audit[5624]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce938c200 a2=3 a3=0 items=0 ppid=1 pid=5624 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:36.896000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:24:36.949246 kernel: audit: type=1300 audit(1696274676.896:1402): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce938c200 a2=3 a3=0 items=0 ppid=1 pid=5624 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:36.949317 kernel: audit: type=1327 audit(1696274676.896:1402): proctitle=737368643A20636F7265205B707269765D Oct 2 19:24:36.909000 audit[5624]: USER_START pid=5624 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:36.968154 kernel: audit: type=1105 audit(1696274676.909:1403): pid=5624 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:36.912000 audit[5626]: CRED_ACQ pid=5626 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:36.983555 kernel: audit: type=1103 audit(1696274676.912:1404): pid=5626 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:37.379493 sshd[5624]: pam_unix(sshd:session): session closed for user core Oct 2 19:24:37.379000 audit[5624]: USER_END pid=5624 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:37.385347 systemd[1]: sshd@7-10.200.8.18:22-10.200.12.6:50590.service: Deactivated successfully. Oct 2 19:24:37.386169 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:24:37.387601 systemd-logind[1288]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:24:37.388527 systemd-logind[1288]: Removed session 10. Oct 2 19:24:37.400708 kernel: audit: type=1106 audit(1696274677.379:1405): pid=5624 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:37.400777 kernel: audit: type=1104 audit(1696274677.379:1406): pid=5624 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:37.379000 audit[5624]: CRED_DISP pid=5624 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:37.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.18:22-10.200.12.6:50590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:37.813809 kubelet[2401]: E1002 19:24:37.813781 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:24:40.813786 kubelet[2401]: E1002 19:24:40.813741 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:24:46.812775 kubelet[2401]: E1002 19:24:46.812727 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:24:47.505732 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:24:47.505879 kernel: audit: type=1130 audit(1696274687.483:1408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.18:22-10.200.12.6:54578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.18:22-10.200.12.6:54578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.484854 systemd[1]: Started sshd@8-10.200.8.18:22-10.200.12.6:54578.service. Oct 2 19:24:48.112000 audit[5707]: USER_ACCT pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.132511 sshd[5707]: Accepted publickey for core from 10.200.12.6 port 54578 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:24:48.132879 kernel: audit: type=1101 audit(1696274688.112:1409): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.132979 sshd[5707]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:24:48.130000 audit[5707]: CRED_ACQ pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.140752 systemd[1]: Started session-11.scope. Oct 2 19:24:48.141308 systemd-logind[1288]: New session 11 of user core. Oct 2 19:24:48.151690 kernel: audit: type=1103 audit(1696274688.130:1410): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.168740 kernel: audit: type=1006 audit(1696274688.130:1411): pid=5707 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:24:48.168815 kernel: audit: type=1300 audit(1696274688.130:1411): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd15beda90 a2=3 a3=0 items=0 ppid=1 pid=5707 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:48.130000 audit[5707]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd15beda90 a2=3 a3=0 items=0 ppid=1 pid=5707 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:48.185218 kernel: audit: type=1327 audit(1696274688.130:1411): proctitle=737368643A20636F7265205B707269765D Oct 2 19:24:48.130000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:24:48.146000 audit[5707]: USER_START pid=5707 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.190713 kernel: audit: type=1105 audit(1696274688.146:1412): pid=5707 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.209723 kernel: audit: type=1103 audit(1696274688.148:1413): pid=5713 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.148000 audit[5713]: CRED_ACQ pid=5713 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.622000 audit[5707]: USER_END pid=5707 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.622559 sshd[5707]: pam_unix(sshd:session): session closed for user core Oct 2 19:24:48.626516 systemd-logind[1288]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:24:48.627535 systemd[1]: sshd@8-10.200.8.18:22-10.200.12.6:54578.service: Deactivated successfully. Oct 2 19:24:48.628476 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:24:48.630142 systemd-logind[1288]: Removed session 11. Oct 2 19:24:48.643691 kernel: audit: type=1106 audit(1696274688.622:1414): pid=5707 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.643763 kernel: audit: type=1104 audit(1696274688.622:1415): pid=5707 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.622000 audit[5707]: CRED_DISP pid=5707 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:48.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.18:22-10.200.12.6:54578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:50.813910 kubelet[2401]: E1002 19:24:50.813879 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:24:51.813486 kubelet[2401]: E1002 19:24:51.813450 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:24:51.844041 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.9Aee0W.mount: Deactivated successfully. Oct 2 19:24:51.874022 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.hwh5RZ.mount: Deactivated successfully. Oct 2 19:24:53.704651 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.Z8GhiP.mount: Deactivated successfully. Oct 2 19:24:58.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.18:22-10.200.12.6:47110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.730474 systemd[1]: Started sshd@9-10.200.8.18:22-10.200.12.6:47110.service. Oct 2 19:24:58.736105 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:24:58.736198 kernel: audit: type=1130 audit(1696274698.729:1417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.18:22-10.200.12.6:47110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.372000 audit[5790]: USER_ACCT pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.393444 sshd[5790]: Accepted publickey for core from 10.200.12.6 port 47110 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:24:59.393811 kernel: audit: type=1101 audit(1696274699.372:1418): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.393942 sshd[5790]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:24:59.391000 audit[5790]: CRED_ACQ pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.399546 systemd[1]: Started session-12.scope. Oct 2 19:24:59.400740 systemd-logind[1288]: New session 12 of user core. Oct 2 19:24:59.411681 kernel: audit: type=1103 audit(1696274699.391:1419): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.411746 kernel: audit: type=1006 audit(1696274699.391:1420): pid=5790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:24:59.391000 audit[5790]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc608b6330 a2=3 a3=0 items=0 ppid=1 pid=5790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:59.438796 kernel: audit: type=1300 audit(1696274699.391:1420): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc608b6330 a2=3 a3=0 items=0 ppid=1 pid=5790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:59.391000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:24:59.445059 kernel: audit: type=1327 audit(1696274699.391:1420): proctitle=737368643A20636F7265205B707269765D Oct 2 19:24:59.445124 kernel: audit: type=1105 audit(1696274699.403:1421): pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.403000 audit[5790]: USER_START pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.406000 audit[5792]: CRED_ACQ pid=5792 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.479090 kernel: audit: type=1103 audit(1696274699.406:1422): pid=5792 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.813127 kubelet[2401]: E1002 19:24:59.813093 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:24:59.882927 sshd[5790]: pam_unix(sshd:session): session closed for user core Oct 2 19:24:59.882000 audit[5790]: USER_END pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.886417 systemd[1]: sshd@9-10.200.8.18:22-10.200.12.6:47110.service: Deactivated successfully. Oct 2 19:24:59.887209 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:24:59.888857 systemd-logind[1288]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:24:59.889780 systemd-logind[1288]: Removed session 12. Oct 2 19:24:59.883000 audit[5790]: CRED_DISP pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.919167 kernel: audit: type=1106 audit(1696274699.882:1423): pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.919252 kernel: audit: type=1104 audit(1696274699.883:1424): pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:24:59.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.18:22-10.200.12.6:47110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.987654 systemd[1]: Started sshd@10-10.200.8.18:22-10.200.12.6:47120.service. Oct 2 19:24:59.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.18:22-10.200.12.6:47120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.609000 audit[5803]: USER_ACCT pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:00.611892 sshd[5803]: Accepted publickey for core from 10.200.12.6 port 47120 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:25:00.611000 audit[5803]: CRED_ACQ pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:00.613410 sshd[5803]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.611000 audit[5803]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff75c96650 a2=3 a3=0 items=0 ppid=1 pid=5803 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:00.611000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:00.619026 systemd[1]: Started session-13.scope. Oct 2 19:25:00.619265 systemd-logind[1288]: New session 13 of user core. Oct 2 19:25:00.622000 audit[5803]: USER_START pid=5803 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:00.624000 audit[5805]: CRED_ACQ pid=5805 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:01.284606 sshd[5803]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:01.284000 audit[5803]: USER_END pid=5803 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:01.284000 audit[5803]: CRED_DISP pid=5803 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:01.287525 systemd[1]: sshd@10-10.200.8.18:22-10.200.12.6:47120.service: Deactivated successfully. Oct 2 19:25:01.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.18:22-10.200.12.6:47120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.288563 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:25:01.289286 systemd-logind[1288]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:25:01.290107 systemd-logind[1288]: Removed session 13. Oct 2 19:25:01.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.18:22-10.200.12.6:47130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.388812 systemd[1]: Started sshd@11-10.200.8.18:22-10.200.12.6:47130.service. Oct 2 19:25:01.834622 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.we7Xt3.mount: Deactivated successfully. Oct 2 19:25:01.870479 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.RlbHPv.mount: Deactivated successfully. Oct 2 19:25:02.290793 sshd[5814]: Accepted publickey for core from 10.200.12.6 port 47130 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:25:02.288000 audit[5814]: USER_ACCT pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:02.290000 audit[5814]: CRED_ACQ pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:02.291000 audit[5814]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef74a6e40 a2=3 a3=0 items=0 ppid=1 pid=5814 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.291000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:02.293448 sshd[5814]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:02.298711 systemd-logind[1288]: New session 14 of user core. Oct 2 19:25:02.299033 systemd[1]: Started session-14.scope. Oct 2 19:25:02.302000 audit[5814]: USER_START pid=5814 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:02.304000 audit[5858]: CRED_ACQ pid=5858 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:02.788969 sshd[5814]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:02.788000 audit[5814]: USER_END pid=5814 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:02.788000 audit[5814]: CRED_DISP pid=5814 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:02.791570 systemd[1]: sshd@11-10.200.8.18:22-10.200.12.6:47130.service: Deactivated successfully. Oct 2 19:25:02.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.18:22-10.200.12.6:47130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.792538 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:25:02.793277 systemd-logind[1288]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:25:02.794072 systemd-logind[1288]: Removed session 14. Oct 2 19:25:02.813123 kubelet[2401]: E1002 19:25:02.813102 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:25:03.713209 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.mFj3Zi.mount: Deactivated successfully. Oct 2 19:25:06.813462 kubelet[2401]: E1002 19:25:06.813232 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:25:11.835179 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.z53bcK.mount: Deactivated successfully. Oct 2 19:25:12.914167 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:25:12.914318 kernel: audit: type=1130 audit(1696274712.890:1444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.18:22-10.200.12.6:53152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.18:22-10.200.12.6:53152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.891729 systemd[1]: Started sshd@12-10.200.8.18:22-10.200.12.6:53152.service. Oct 2 19:25:13.601000 audit[5932]: USER_ACCT pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:13.604432 sshd[5932]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:13.621835 kernel: audit: type=1101 audit(1696274713.601:1445): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:13.621873 sshd[5932]: Accepted publickey for core from 10.200.12.6 port 53152 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:25:13.602000 audit[5932]: CRED_ACQ pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:13.630703 systemd[1]: Started session-15.scope. Oct 2 19:25:13.631380 systemd-logind[1288]: New session 15 of user core. Oct 2 19:25:13.638682 kernel: audit: type=1103 audit(1696274713.602:1446): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:13.650747 kernel: audit: type=1006 audit(1696274713.602:1447): pid=5932 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:25:13.650801 kernel: audit: type=1300 audit(1696274713.602:1447): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff364295e0 a2=3 a3=0 items=0 ppid=1 pid=5932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:13.602000 audit[5932]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff364295e0 a2=3 a3=0 items=0 ppid=1 pid=5932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:13.602000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:13.673961 kernel: audit: type=1327 audit(1696274713.602:1447): proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:13.677691 kernel: audit: type=1105 audit(1696274713.637:1448): pid=5932 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:13.637000 audit[5932]: USER_START pid=5932 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:13.650000 audit[5934]: CRED_ACQ pid=5934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:13.710163 kernel: audit: type=1103 audit(1696274713.650:1449): pid=5934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:14.111303 sshd[5932]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:14.111000 audit[5932]: USER_END pid=5932 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:14.115018 systemd[1]: sshd@12-10.200.8.18:22-10.200.12.6:53152.service: Deactivated successfully. Oct 2 19:25:14.115979 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:25:14.117879 systemd-logind[1288]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:25:14.119050 systemd-logind[1288]: Removed session 15. Oct 2 19:25:14.111000 audit[5932]: CRED_DISP pid=5932 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:14.132700 kernel: audit: type=1106 audit(1696274714.111:1450): pid=5932 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:14.132744 kernel: audit: type=1104 audit(1696274714.111:1451): pid=5932 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:14.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.18:22-10.200.12.6:53152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:14.813251 kubelet[2401]: E1002 19:25:14.813220 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:25:14.813991 kubelet[2401]: E1002 19:25:14.813968 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-vqlk8" podUID="16349b50-b7cd-4368-9440-00bbbff6973a" Oct 2 19:25:17.814782 env[1304]: time="2023-10-02T19:25:17.814729228Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:25:18.127551 env[1304]: time="2023-10-02T19:25:18.127369948Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:18.133264 env[1304]: time="2023-10-02T19:25:18.133201769Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:18.133618 kubelet[2401]: E1002 19:25:18.133585 2401 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:18.134093 kubelet[2401]: E1002 19:25:18.133637 2401 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:18.134093 kubelet[2401]: E1002 19:25:18.133812 2401 kuberuntime_manager.go:1209] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gbgmn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-647bdd45fd-s9rwq_calico-apiserver(b12dc933-4620-4514-9d2b-b547d561a8cc): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:18.134093 kubelet[2401]: E1002 19:25:18.133908 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-s9rwq" podUID="b12dc933-4620-4514-9d2b-b547d561a8cc" Oct 2 19:25:21.860515 systemd[1]: run-containerd-runc-k8s.io-b42afb87367743d2928204d91905c8258986d7e10e05ab8116a4c8d66a29bdb2-runc.1fuDNn.mount: Deactivated successfully. Oct 2 19:25:23.700468 systemd[1]: run-containerd-runc-k8s.io-80d7cb3f7b1495f46764eb41441f9c91b347ff6a40be66abe7dfdb60de5ec569-runc.bzNWUB.mount: Deactivated successfully. Oct 2 19:25:24.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.18:22-10.200.12.6:58596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:24.217147 systemd[1]: Started sshd@13-10.200.8.18:22-10.200.12.6:58596.service. Oct 2 19:25:24.222398 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:25:24.222474 kernel: audit: type=1130 audit(1696274724.215:1453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.18:22-10.200.12.6:58596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:24.875685 kernel: audit: type=1101 audit(1696274724.854:1454): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:24.854000 audit[6036]: USER_ACCT pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:24.875974 sshd[6036]: Accepted publickey for core from 10.200.12.6 port 58596 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:25:24.876173 sshd[6036]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:24.873000 audit[6036]: CRED_ACQ pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:24.881088 systemd[1]: Started session-16.scope. Oct 2 19:25:24.882081 systemd-logind[1288]: New session 16 of user core. Oct 2 19:25:24.893683 kernel: audit: type=1103 audit(1696274724.873:1455): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:24.893750 kernel: audit: type=1006 audit(1696274724.874:1456): pid=6036 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:25:24.874000 audit[6036]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce06db2c0 a2=3 a3=0 items=0 ppid=1 pid=6036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:24.874000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:24.927082 kernel: audit: type=1300 audit(1696274724.874:1456): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce06db2c0 a2=3 a3=0 items=0 ppid=1 pid=6036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:24.927156 kernel: audit: type=1327 audit(1696274724.874:1456): proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:24.927858 kernel: audit: type=1105 audit(1696274724.886:1457): pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:24.886000 audit[6036]: USER_START pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:24.945698 kernel: audit: type=1103 audit(1696274724.888:1458): pid=6038 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:24.888000 audit[6038]: CRED_ACQ pid=6038 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:25.362263 sshd[6036]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:25.361000 audit[6036]: USER_END pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:25.367765 systemd[1]: sshd@13-10.200.8.18:22-10.200.12.6:58596.service: Deactivated successfully. Oct 2 19:25:25.368569 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:25:25.369737 systemd-logind[1288]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:25:25.370637 systemd-logind[1288]: Removed session 16. Oct 2 19:25:25.361000 audit[6036]: CRED_DISP pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:25.398909 kernel: audit: type=1106 audit(1696274725.361:1459): pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:25.398990 kernel: audit: type=1104 audit(1696274725.361:1460): pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:25:25.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.18:22-10.200.12.6:58596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:25.813625 kubelet[2401]: E1002 19:25:25.813597 2401 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-647bdd45fd-zjdbr" podUID="15655c85-7471-4a8d-9c21-d213e81e6ab4" Oct 2 19:25:29.434269 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#137 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.434707 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#140 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.446952 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#134 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.447237 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#141 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.459369 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#138 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.459629 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#139 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.471874 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#135 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.472115 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#136 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.492309 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#136 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.492524 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#135 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.504668 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#139 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.504880 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#138 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.510819 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#141 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.522898 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#134 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.523084 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#140 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.535174 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#137 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.554797 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#137 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.555033 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#140 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.555186 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#134 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.566924 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#141 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.567136 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#138 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.579097 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#139 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.579292 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#135 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.591339 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#136 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.591570 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#142 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.603017 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#143 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.603241 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#144 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.614710 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#145 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.614937 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#146 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.626412 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#147 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.626641 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#148 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.637680 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#149 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.653101 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#150 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.653315 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#151 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.653457 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#152 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.658700 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#153 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.664343 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#154 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.669935 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#155 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.681070 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#156 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.681283 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#157 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 19:25:29.686690 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#158 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001