Oct 2 19:51:16.042118 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:51:16.042150 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:16.042165 kernel: BIOS-provided physical RAM map: Oct 2 19:51:16.042176 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:51:16.042187 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 19:51:16.042209 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 19:51:16.042225 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 19:51:16.042236 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 19:51:16.042247 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 19:51:16.042258 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 19:51:16.042269 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 19:51:16.042279 kernel: printk: bootconsole [earlyser0] enabled Oct 2 19:51:16.042290 kernel: NX (Execute Disable) protection: active Oct 2 19:51:16.042301 kernel: efi: EFI v2.70 by Microsoft Oct 2 19:51:16.042317 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5c9a98 RNG=0x3ffd1018 Oct 2 19:51:16.042329 kernel: random: crng init done Oct 2 19:51:16.042341 kernel: SMBIOS 3.1.0 present. Oct 2 19:51:16.042353 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 19:51:16.042365 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 19:51:16.042376 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 19:51:16.042388 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 19:51:16.042399 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 19:51:16.042414 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 19:51:16.042425 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 19:51:16.042437 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 19:51:16.042449 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 19:51:16.042461 kernel: tsc: Detected 2593.908 MHz processor Oct 2 19:51:16.042473 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:51:16.042486 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:51:16.042498 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 19:51:16.042510 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:51:16.042522 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 19:51:16.042536 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 19:51:16.042548 kernel: Using GB pages for direct mapping Oct 2 19:51:16.042560 kernel: Secure boot disabled Oct 2 19:51:16.042572 kernel: ACPI: Early table checksum verification disabled Oct 2 19:51:16.042583 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 19:51:16.042595 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042607 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042619 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 19:51:16.042639 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 19:51:16.042652 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042665 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042678 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042691 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042704 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042719 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042732 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.042745 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 19:51:16.042758 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 19:51:16.042770 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 19:51:16.042783 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 19:51:16.042796 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 19:51:16.042809 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 19:51:16.042824 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 19:51:16.042837 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 19:51:16.042851 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 19:51:16.042863 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 19:51:16.042876 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:51:16.042889 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:51:16.042902 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 19:51:16.042914 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 19:51:16.042927 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 19:51:16.042943 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 19:51:16.042956 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 19:51:16.042968 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 19:51:16.042981 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 19:51:16.042994 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 19:51:16.043007 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 19:51:16.043020 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 19:51:16.043032 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 19:51:16.043045 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 19:51:16.043061 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 19:51:16.043074 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 19:51:16.043087 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 19:51:16.043099 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 19:51:16.043113 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 19:51:16.043125 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 19:51:16.043138 kernel: Zone ranges: Oct 2 19:51:16.043151 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:51:16.043164 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:51:16.043179 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:51:16.043192 kernel: Movable zone start for each node Oct 2 19:51:16.043212 kernel: Early memory node ranges Oct 2 19:51:16.043225 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:51:16.043238 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 19:51:16.043250 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 19:51:16.043263 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:51:16.043275 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 19:51:16.043288 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:51:16.043304 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:51:16.043317 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 19:51:16.043330 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 19:51:16.043343 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 19:51:16.043356 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:51:16.043368 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:51:16.043381 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:51:16.043394 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 19:51:16.043407 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:51:16.043422 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 19:51:16.043435 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 19:51:16.043448 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:51:16.043461 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:51:16.043474 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:51:16.043487 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:51:16.043500 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:51:16.043512 kernel: Hyper-V: PV spinlocks enabled Oct 2 19:51:16.043525 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:51:16.043540 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 19:51:16.043553 kernel: Policy zone: Normal Oct 2 19:51:16.043567 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:16.043581 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:51:16.043593 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 19:51:16.043606 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:51:16.043619 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:51:16.043632 kernel: Memory: 8081204K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 305996K reserved, 0K cma-reserved) Oct 2 19:51:16.043647 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:51:16.043661 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:51:16.043683 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:51:16.043699 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:51:16.043713 kernel: rcu: RCU event tracing is enabled. Oct 2 19:51:16.043727 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:51:16.043741 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:51:16.043754 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:51:16.043768 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:51:16.043781 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:51:16.043795 kernel: Using NULL legacy PIC Oct 2 19:51:16.043811 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 19:51:16.043824 kernel: Console: colour dummy device 80x25 Oct 2 19:51:16.043838 kernel: printk: console [tty1] enabled Oct 2 19:51:16.043851 kernel: printk: console [ttyS0] enabled Oct 2 19:51:16.043865 kernel: printk: bootconsole [earlyser0] disabled Oct 2 19:51:16.043881 kernel: ACPI: Core revision 20210730 Oct 2 19:51:16.043895 kernel: Failed to register legacy timer interrupt Oct 2 19:51:16.043908 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:51:16.043921 kernel: Hyper-V: Using IPI hypercalls Oct 2 19:51:16.043936 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593908) Oct 2 19:51:16.043949 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:51:16.043963 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:51:16.043976 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:51:16.043990 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:51:16.044003 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:51:16.044019 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:51:16.044033 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:51:16.044046 kernel: RETBleed: Vulnerable Oct 2 19:51:16.044060 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:51:16.044073 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:51:16.044087 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:51:16.044100 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:51:16.044113 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:51:16.044126 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:51:16.044140 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:51:16.044157 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:51:16.044170 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:51:16.044184 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:51:16.046487 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:51:16.046508 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 19:51:16.046522 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 19:51:16.046536 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 19:51:16.046550 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 19:51:16.046563 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:51:16.046577 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:51:16.046590 kernel: LSM: Security Framework initializing Oct 2 19:51:16.046604 kernel: SELinux: Initializing. Oct 2 19:51:16.046622 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.046636 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.046650 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:51:16.046664 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:51:16.046678 kernel: signal: max sigframe size: 3632 Oct 2 19:51:16.046692 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:51:16.046705 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:51:16.046719 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:51:16.046733 kernel: x86: Booting SMP configuration: Oct 2 19:51:16.046746 kernel: .... node #0, CPUs: #1 Oct 2 19:51:16.046763 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 19:51:16.046777 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:51:16.046791 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:51:16.046805 kernel: smpboot: Max logical packages: 1 Oct 2 19:51:16.046818 kernel: smpboot: Total of 2 processors activated (10375.63 BogoMIPS) Oct 2 19:51:16.046832 kernel: devtmpfs: initialized Oct 2 19:51:16.046846 kernel: x86/mm: Memory block size: 128MB Oct 2 19:51:16.046859 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 19:51:16.046876 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:51:16.046890 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:51:16.046904 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:51:16.046917 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:51:16.046931 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:51:16.046944 kernel: audit: type=2000 audit(1696276274.024:1): state=initialized audit_enabled=0 res=1 Oct 2 19:51:16.046958 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:51:16.046971 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:51:16.046985 kernel: cpuidle: using governor menu Oct 2 19:51:16.047004 kernel: ACPI: bus type PCI registered Oct 2 19:51:16.047018 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:51:16.047032 kernel: dca service started, version 1.12.1 Oct 2 19:51:16.047045 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:51:16.047059 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:51:16.047073 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:51:16.047086 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:51:16.047100 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:51:16.047113 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:51:16.047130 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:51:16.047143 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:51:16.047157 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:51:16.047171 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:51:16.047185 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:51:16.047206 kernel: ACPI: Interpreter enabled Oct 2 19:51:16.047219 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:51:16.047233 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:51:16.047247 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:51:16.047264 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 19:51:16.047278 kernel: iommu: Default domain type: Translated Oct 2 19:51:16.047291 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:51:16.047305 kernel: vgaarb: loaded Oct 2 19:51:16.047319 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:51:16.047333 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:51:16.047346 kernel: PTP clock support registered Oct 2 19:51:16.047360 kernel: Registered efivars operations Oct 2 19:51:16.047374 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:51:16.047387 kernel: PCI: System does not support PCI Oct 2 19:51:16.047403 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 19:51:16.047417 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:51:16.047431 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:51:16.047444 kernel: pnp: PnP ACPI init Oct 2 19:51:16.047458 kernel: pnp: PnP ACPI: found 3 devices Oct 2 19:51:16.047472 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:51:16.047486 kernel: NET: Registered PF_INET protocol family Oct 2 19:51:16.047499 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:51:16.047516 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 19:51:16.047530 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:51:16.047544 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:51:16.047557 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:51:16.047571 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 19:51:16.047584 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.047598 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.047612 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:51:16.047625 kernel: NET: Registered PF_XDP protocol family Oct 2 19:51:16.047641 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:51:16.047654 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:51:16.047668 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 19:51:16.047682 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:51:16.047696 kernel: Initialise system trusted keyrings Oct 2 19:51:16.047710 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 19:51:16.047723 kernel: Key type asymmetric registered Oct 2 19:51:16.047737 kernel: Asymmetric key parser 'x509' registered Oct 2 19:51:16.047750 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:51:16.047766 kernel: io scheduler mq-deadline registered Oct 2 19:51:16.047780 kernel: io scheduler kyber registered Oct 2 19:51:16.047793 kernel: io scheduler bfq registered Oct 2 19:51:16.047807 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:51:16.047820 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:51:16.047834 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:51:16.047848 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:51:16.047861 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:51:16.048023 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 19:51:16.048137 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T19:51:15 UTC (1696276275) Oct 2 19:51:16.073329 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 19:51:16.073366 kernel: fail to initialize ptp_kvm Oct 2 19:51:16.073380 kernel: intel_pstate: CPU model not supported Oct 2 19:51:16.073392 kernel: efifb: probing for efifb Oct 2 19:51:16.073405 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 19:51:16.073418 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 19:51:16.073430 kernel: efifb: scrolling: redraw Oct 2 19:51:16.073449 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:51:16.073460 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:51:16.073472 kernel: fb0: EFI VGA frame buffer device Oct 2 19:51:16.073483 kernel: pstore: Registered efi as persistent store backend Oct 2 19:51:16.073496 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:51:16.073509 kernel: Segment Routing with IPv6 Oct 2 19:51:16.073522 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:51:16.073534 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:51:16.073546 kernel: Key type dns_resolver registered Oct 2 19:51:16.073562 kernel: IPI shorthand broadcast: enabled Oct 2 19:51:16.073573 kernel: sched_clock: Marking stable (771343700, 22516400)->(984382800, -190522700) Oct 2 19:51:16.073586 kernel: registered taskstats version 1 Oct 2 19:51:16.073598 kernel: Loading compiled-in X.509 certificates Oct 2 19:51:16.073610 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:51:16.073622 kernel: Key type .fscrypt registered Oct 2 19:51:16.073634 kernel: Key type fscrypt-provisioning registered Oct 2 19:51:16.073647 kernel: pstore: Using crash dump compression: deflate Oct 2 19:51:16.073662 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:51:16.073674 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:51:16.073687 kernel: ima: No architecture policies found Oct 2 19:51:16.073700 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:51:16.073712 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:51:16.073725 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:51:16.073738 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:51:16.073751 kernel: Run /init as init process Oct 2 19:51:16.073763 kernel: with arguments: Oct 2 19:51:16.073776 kernel: /init Oct 2 19:51:16.073790 kernel: with environment: Oct 2 19:51:16.073802 kernel: HOME=/ Oct 2 19:51:16.073813 kernel: TERM=linux Oct 2 19:51:16.073827 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:51:16.073843 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:51:16.073860 systemd[1]: Detected virtualization microsoft. Oct 2 19:51:16.073874 systemd[1]: Detected architecture x86-64. Oct 2 19:51:16.073889 systemd[1]: Running in initrd. Oct 2 19:51:16.073902 systemd[1]: No hostname configured, using default hostname. Oct 2 19:51:16.073916 systemd[1]: Hostname set to . Oct 2 19:51:16.073930 systemd[1]: Initializing machine ID from random generator. Oct 2 19:51:16.073944 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:51:16.073957 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:51:16.073970 systemd[1]: Reached target cryptsetup.target. Oct 2 19:51:16.073984 systemd[1]: Reached target paths.target. Oct 2 19:51:16.073997 systemd[1]: Reached target slices.target. Oct 2 19:51:16.074013 systemd[1]: Reached target swap.target. Oct 2 19:51:16.074027 systemd[1]: Reached target timers.target. Oct 2 19:51:16.074041 systemd[1]: Listening on iscsid.socket. Oct 2 19:51:16.074055 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:51:16.074068 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:51:16.074082 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:51:16.074096 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:51:16.074111 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:51:16.074126 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:51:16.074140 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:51:16.074154 systemd[1]: Reached target sockets.target. Oct 2 19:51:16.074167 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:51:16.074181 systemd[1]: Finished network-cleanup.service. Oct 2 19:51:16.074244 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:51:16.074259 systemd[1]: Starting systemd-journald.service... Oct 2 19:51:16.074272 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:51:16.074289 systemd[1]: Starting systemd-resolved.service... Oct 2 19:51:16.074303 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:51:16.074316 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:51:16.074330 kernel: audit: type=1130 audit(1696276276.048:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.074343 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:51:16.074364 systemd-journald[183]: Journal started Oct 2 19:51:16.074438 systemd-journald[183]: Runtime Journal (/run/log/journal/7076f166ed9749bd9afb0a59590aa8c8) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:51:16.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.059661 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 19:51:16.076344 systemd-resolved[185]: Positive Trust Anchors: Oct 2 19:51:16.076353 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:51:16.103446 systemd[1]: Started systemd-journald.service. Oct 2 19:51:16.103467 kernel: audit: type=1130 audit(1696276276.083:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.076389 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:51:16.079878 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 19:51:16.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.126988 systemd[1]: Started systemd-resolved.service. Oct 2 19:51:16.155359 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:51:16.155387 kernel: audit: type=1130 audit(1696276276.126:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.155417 kernel: Bridge firewalling registered Oct 2 19:51:16.155438 kernel: audit: type=1130 audit(1696276276.143:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.141167 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 19:51:16.143812 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:51:16.163013 systemd[1]: Reached target nss-lookup.target. Oct 2 19:51:16.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.177217 kernel: audit: type=1130 audit(1696276276.162:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.177742 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:51:16.184208 kernel: SCSI subsystem initialized Oct 2 19:51:16.185290 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:51:16.194791 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:51:16.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.211590 kernel: audit: type=1130 audit(1696276276.195:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.222039 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:51:16.248238 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:51:16.248266 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:51:16.248282 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:51:16.248300 kernel: audit: type=1130 audit(1696276276.235:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.249458 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:51:16.253418 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 19:51:16.271913 kernel: audit: type=1130 audit(1696276276.256:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.272083 dracut-cmdline[200]: dracut-dracut-053 Oct 2 19:51:16.272083 dracut-cmdline[200]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:16.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.254379 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:51:16.308415 kernel: audit: type=1130 audit(1696276276.293:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.270763 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:51:16.291097 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:51:16.352217 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:51:16.366215 kernel: iscsi: registered transport (tcp) Oct 2 19:51:16.390714 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:51:16.390777 kernel: QLogic iSCSI HBA Driver Oct 2 19:51:16.420210 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:51:16.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.423530 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:51:16.477220 kernel: raid6: avx512x4 gen() 18446 MB/s Oct 2 19:51:16.497206 kernel: raid6: avx512x4 xor() 7055 MB/s Oct 2 19:51:16.517204 kernel: raid6: avx512x2 gen() 18342 MB/s Oct 2 19:51:16.538209 kernel: raid6: avx512x2 xor() 29704 MB/s Oct 2 19:51:16.558205 kernel: raid6: avx512x1 gen() 18398 MB/s Oct 2 19:51:16.578205 kernel: raid6: avx512x1 xor() 26954 MB/s Oct 2 19:51:16.598207 kernel: raid6: avx2x4 gen() 18348 MB/s Oct 2 19:51:16.618204 kernel: raid6: avx2x4 xor() 6875 MB/s Oct 2 19:51:16.638205 kernel: raid6: avx2x2 gen() 18380 MB/s Oct 2 19:51:16.659208 kernel: raid6: avx2x2 xor() 22212 MB/s Oct 2 19:51:16.679203 kernel: raid6: avx2x1 gen() 13964 MB/s Oct 2 19:51:16.699203 kernel: raid6: avx2x1 xor() 19408 MB/s Oct 2 19:51:16.719207 kernel: raid6: sse2x4 gen() 11685 MB/s Oct 2 19:51:16.739205 kernel: raid6: sse2x4 xor() 6602 MB/s Oct 2 19:51:16.759204 kernel: raid6: sse2x2 gen() 12912 MB/s Oct 2 19:51:16.780211 kernel: raid6: sse2x2 xor() 7720 MB/s Oct 2 19:51:16.800207 kernel: raid6: sse2x1 gen() 11673 MB/s Oct 2 19:51:16.823753 kernel: raid6: sse2x1 xor() 5929 MB/s Oct 2 19:51:16.823772 kernel: raid6: using algorithm avx512x4 gen() 18446 MB/s Oct 2 19:51:16.823784 kernel: raid6: .... xor() 7055 MB/s, rmw enabled Oct 2 19:51:16.831172 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:51:16.847216 kernel: xor: automatically using best checksumming function avx Oct 2 19:51:16.942225 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:51:16.950791 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:51:16.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.954000 audit: BPF prog-id=7 op=LOAD Oct 2 19:51:16.954000 audit: BPF prog-id=8 op=LOAD Oct 2 19:51:16.955394 systemd[1]: Starting systemd-udevd.service... Oct 2 19:51:16.969890 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 19:51:16.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.974610 systemd[1]: Started systemd-udevd.service. Oct 2 19:51:16.978063 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:51:16.998304 dracut-pre-trigger[397]: rd.md=0: removing MD RAID activation Oct 2 19:51:17.029039 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:51:17.032396 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:51:17.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.070558 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:51:17.130222 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:51:17.153580 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:51:17.153641 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 19:51:17.153655 kernel: AES CTR mode by8 optimization enabled Oct 2 19:51:17.175212 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 19:51:17.180580 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 19:51:17.197219 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 19:51:17.197260 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:51:17.206218 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 19:51:17.214867 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 19:51:17.214915 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 19:51:17.220561 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 19:51:17.228220 kernel: scsi host0: storvsc_host_t Oct 2 19:51:17.228402 kernel: scsi host1: storvsc_host_t Oct 2 19:51:17.236277 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 19:51:17.242233 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 19:51:17.261668 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 19:51:17.261920 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:51:17.267212 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 19:51:17.267386 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 19:51:17.267512 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:51:17.272393 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 19:51:17.272579 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 19:51:17.272703 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 19:51:17.282214 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:17.286215 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 19:51:17.352217 kernel: hv_netvsc 000d3a68-d022-000d-3a68-d022000d3a68 eth0: VF slot 1 added Oct 2 19:51:17.362215 kernel: hv_vmbus: registering driver hv_pci Oct 2 19:51:17.369215 kernel: hv_pci 9227aebc-4844-4b05-bb5c-75159c5a9bd2: PCI VMBus probing: Using version 0x10004 Oct 2 19:51:17.380831 kernel: hv_pci 9227aebc-4844-4b05-bb5c-75159c5a9bd2: PCI host bridge to bus 4844:00 Oct 2 19:51:17.380992 kernel: pci_bus 4844:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 19:51:17.381129 kernel: pci_bus 4844:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 19:51:17.390365 kernel: pci 4844:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 19:51:17.399656 kernel: pci 4844:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:51:17.415476 kernel: pci 4844:00:02.0: enabling Extended Tags Oct 2 19:51:17.428351 kernel: pci 4844:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 4844:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 19:51:17.437610 kernel: pci_bus 4844:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 19:51:17.437779 kernel: pci 4844:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:51:17.537222 kernel: mlx5_core 4844:00:02.0: firmware version: 14.30.1224 Oct 2 19:51:17.633868 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:51:17.654215 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (449) Oct 2 19:51:17.674368 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:51:17.702222 kernel: mlx5_core 4844:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:51:17.763857 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:51:17.769339 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:51:17.776967 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:51:17.780383 systemd[1]: Starting disk-uuid.service... Oct 2 19:51:17.864835 kernel: mlx5_core 4844:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 19:51:17.865034 kernel: mlx5_core 4844:00:02.0: mlx5e_tc_post_act_init:40:(pid 16): firmware level support is missing Oct 2 19:51:17.875328 kernel: hv_netvsc 000d3a68-d022-000d-3a68-d022000d3a68 eth0: VF registering: eth1 Oct 2 19:51:17.884219 kernel: mlx5_core 4844:00:02.0 eth1: joined to eth0 Oct 2 19:51:17.899222 kernel: mlx5_core 4844:00:02.0 enP18500s1: renamed from eth1 Oct 2 19:51:18.805957 disk-uuid[552]: The operation has completed successfully. Oct 2 19:51:18.809003 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:18.879346 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:51:18.879450 systemd[1]: Finished disk-uuid.service. Oct 2 19:51:18.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:18.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:18.891432 systemd[1]: Starting verity-setup.service... Oct 2 19:51:18.925322 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:51:19.081817 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:51:19.085329 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:51:19.091904 systemd[1]: Finished verity-setup.service. Oct 2 19:51:19.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.170149 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:51:19.175676 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:51:19.172394 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:51:19.173238 systemd[1]: Starting ignition-setup.service... Oct 2 19:51:19.210170 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:19.210216 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:19.210236 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:19.184045 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:51:19.256991 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:51:19.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.262000 audit: BPF prog-id=9 op=LOAD Oct 2 19:51:19.263159 systemd[1]: Starting systemd-networkd.service... Oct 2 19:51:19.269478 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:51:19.289261 systemd-networkd[826]: lo: Link UP Oct 2 19:51:19.289270 systemd-networkd[826]: lo: Gained carrier Oct 2 19:51:19.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.290163 systemd-networkd[826]: Enumeration completed Oct 2 19:51:19.290243 systemd[1]: Started systemd-networkd.service. Oct 2 19:51:19.293588 systemd-networkd[826]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:51:19.293850 systemd[1]: Reached target network.target. Oct 2 19:51:19.300462 systemd[1]: Starting iscsiuio.service... Oct 2 19:51:19.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.308292 systemd[1]: Started iscsiuio.service. Oct 2 19:51:19.312737 systemd[1]: Starting iscsid.service... Oct 2 19:51:19.321732 iscsid[832]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:51:19.321732 iscsid[832]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:51:19.321732 iscsid[832]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:51:19.321732 iscsid[832]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:51:19.344055 iscsid[832]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:51:19.344055 iscsid[832]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:51:19.351658 systemd[1]: Started iscsid.service. Oct 2 19:51:19.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.354402 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:51:19.367212 kernel: mlx5_core 4844:00:02.0 enP18500s1: Link up Oct 2 19:51:19.372076 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:51:19.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.376601 systemd[1]: Finished ignition-setup.service. Oct 2 19:51:19.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.380672 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:51:19.384862 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:51:19.386991 systemd[1]: Reached target remote-fs.target. Oct 2 19:51:19.389746 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:51:19.392474 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:51:19.406690 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:51:19.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.449207 kernel: hv_netvsc 000d3a68-d022-000d-3a68-d022000d3a68 eth0: Data path switched to VF: enP18500s1 Oct 2 19:51:19.449423 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:51:19.450028 systemd-networkd[826]: enP18500s1: Link UP Oct 2 19:51:19.450375 systemd-networkd[826]: eth0: Link UP Oct 2 19:51:19.450825 systemd-networkd[826]: eth0: Gained carrier Oct 2 19:51:19.459363 systemd-networkd[826]: enP18500s1: Gained carrier Oct 2 19:51:19.499285 systemd-networkd[826]: eth0: DHCPv4 address 10.200.8.19/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:51:21.235422 systemd-networkd[826]: eth0: Gained IPv6LL Oct 2 19:51:21.644229 ignition[843]: Ignition 2.14.0 Oct 2 19:51:21.644246 ignition[843]: Stage: fetch-offline Oct 2 19:51:21.644336 ignition[843]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.644393 ignition[843]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.713259 ignition[843]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.714885 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:51:21.741100 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:51:21.741135 kernel: audit: type=1130 audit(1696276281.719:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.713490 ignition[843]: parsed url from cmdline: "" Oct 2 19:51:21.720967 systemd[1]: Starting ignition-fetch.service... Oct 2 19:51:21.713494 ignition[843]: no config URL provided Oct 2 19:51:21.713503 ignition[843]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:51:21.713514 ignition[843]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:51:21.713525 ignition[843]: failed to fetch config: resource requires networking Oct 2 19:51:21.713658 ignition[843]: Ignition finished successfully Oct 2 19:51:21.729819 ignition[854]: Ignition 2.14.0 Oct 2 19:51:21.729825 ignition[854]: Stage: fetch Oct 2 19:51:21.729950 ignition[854]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.729974 ignition[854]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.734598 ignition[854]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.734909 ignition[854]: parsed url from cmdline: "" Oct 2 19:51:21.734921 ignition[854]: no config URL provided Oct 2 19:51:21.734935 ignition[854]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:51:21.734952 ignition[854]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:51:21.735003 ignition[854]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 19:51:21.775011 ignition[854]: GET result: OK Oct 2 19:51:21.775034 ignition[854]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 19:51:21.858475 ignition[854]: opening config device: "/dev/sr0" Oct 2 19:51:21.858965 ignition[854]: getting drive status for "/dev/sr0" Oct 2 19:51:21.859029 ignition[854]: drive status: OK Oct 2 19:51:21.859074 ignition[854]: mounting config device Oct 2 19:51:21.859097 ignition[854]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure4051385307" Oct 2 19:51:21.882295 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 19:51:21.881917 systemd[1]: tmp-ignition\x2dazure4051385307.mount: Deactivated successfully. Oct 2 19:51:21.880442 ignition[854]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure4051385307" Oct 2 19:51:21.880454 ignition[854]: checking for config drive Oct 2 19:51:21.880760 ignition[854]: reading config Oct 2 19:51:21.881133 ignition[854]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure4051385307" Oct 2 19:51:21.881239 ignition[854]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure4051385307" Oct 2 19:51:21.881253 ignition[854]: config has been read from custom data Oct 2 19:51:21.881314 ignition[854]: parsing config with SHA512: 8a51fb4f5020f117e158655a643b2ccc518e9adab867bf166eb96cc8d3ee570970ec9aa98be1cca736d81a84d2e2162a43c98af9567fb4e58311fdec35a857dd Oct 2 19:51:21.918414 unknown[854]: fetched base config from "system" Oct 2 19:51:21.918426 unknown[854]: fetched base config from "system" Oct 2 19:51:21.918972 ignition[854]: fetch: fetch complete Oct 2 19:51:21.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.918434 unknown[854]: fetched user config from "azure" Oct 2 19:51:21.945495 kernel: audit: type=1130 audit(1696276281.925:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.918979 ignition[854]: fetch: fetch passed Oct 2 19:51:21.922581 systemd[1]: Finished ignition-fetch.service. Oct 2 19:51:21.919018 ignition[854]: Ignition finished successfully Oct 2 19:51:21.926267 systemd[1]: Starting ignition-kargs.service... Oct 2 19:51:21.948857 ignition[861]: Ignition 2.14.0 Oct 2 19:51:21.948863 ignition[861]: Stage: kargs Oct 2 19:51:21.948973 ignition[861]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.957172 systemd[1]: Finished ignition-kargs.service. Oct 2 19:51:21.978355 kernel: audit: type=1130 audit(1696276281.961:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.948999 ignition[861]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.967217 systemd[1]: Starting ignition-disks.service... Oct 2 19:51:21.953686 ignition[861]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.955533 ignition[861]: kargs: kargs passed Oct 2 19:51:21.955598 ignition[861]: Ignition finished successfully Oct 2 19:51:21.982414 ignition[867]: Ignition 2.14.0 Oct 2 19:51:21.982421 ignition[867]: Stage: disks Oct 2 19:51:21.982528 ignition[867]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.982556 ignition[867]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.994450 systemd[1]: Finished ignition-disks.service. Oct 2 19:51:21.987726 ignition[867]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:22.015795 kernel: audit: type=1130 audit(1696276281.998:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.998839 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:51:21.989926 ignition[867]: disks: disks passed Oct 2 19:51:22.015902 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:51:21.990000 ignition[867]: Ignition finished successfully Oct 2 19:51:22.021487 systemd[1]: Reached target local-fs.target. Oct 2 19:51:22.028699 systemd[1]: Reached target sysinit.target. Oct 2 19:51:22.030800 systemd[1]: Reached target basic.target. Oct 2 19:51:22.032675 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:51:22.093047 systemd-fsck[875]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 19:51:22.099549 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:51:22.118633 kernel: audit: type=1130 audit(1696276282.101:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.104211 systemd[1]: Mounting sysroot.mount... Oct 2 19:51:22.131095 systemd[1]: Mounted sysroot.mount. Oct 2 19:51:22.137097 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:51:22.133254 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:51:22.159269 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:51:22.164907 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:51:22.170453 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:51:22.170496 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:51:22.177825 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:51:22.215154 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:51:22.220671 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:51:22.231214 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (885) Oct 2 19:51:22.240722 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:22.240759 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:22.240772 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:22.245233 initrd-setup-root[890]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:51:22.251741 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:51:22.276695 initrd-setup-root[916]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:51:22.292073 initrd-setup-root[924]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:51:22.296567 initrd-setup-root[932]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:51:22.688631 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:51:22.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.694370 systemd[1]: Starting ignition-mount.service... Oct 2 19:51:22.711414 kernel: audit: type=1130 audit(1696276282.693:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.707299 systemd[1]: Starting sysroot-boot.service... Oct 2 19:51:22.731543 systemd[1]: Finished sysroot-boot.service. Oct 2 19:51:22.746867 kernel: audit: type=1130 audit(1696276282.734:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.746930 ignition[951]: INFO : Ignition 2.14.0 Oct 2 19:51:22.746930 ignition[951]: INFO : Stage: mount Oct 2 19:51:22.746930 ignition[951]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:22.746930 ignition[951]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:22.746930 ignition[951]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:22.746930 ignition[951]: INFO : mount: mount passed Oct 2 19:51:22.746930 ignition[951]: INFO : Ignition finished successfully Oct 2 19:51:22.779096 kernel: audit: type=1130 audit(1696276282.750:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.744190 systemd[1]: Finished ignition-mount.service. Oct 2 19:51:22.882125 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:51:22.882259 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:51:23.346422 coreos-metadata[884]: Oct 02 19:51:23.346 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 19:51:23.360412 coreos-metadata[884]: Oct 02 19:51:23.360 INFO Fetch successful Oct 2 19:51:23.395282 coreos-metadata[884]: Oct 02 19:51:23.395 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 19:51:23.412726 coreos-metadata[884]: Oct 02 19:51:23.412 INFO Fetch successful Oct 2 19:51:23.427519 coreos-metadata[884]: Oct 02 19:51:23.427 INFO wrote hostname ci-3510.3.0-a-74431cd9b5 to /sysroot/etc/hostname Oct 2 19:51:23.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:23.429385 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:51:23.450214 kernel: audit: type=1130 audit(1696276283.433:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:23.434656 systemd[1]: Starting ignition-files.service... Oct 2 19:51:23.453546 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:51:23.468216 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (963) Oct 2 19:51:23.477452 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:23.477493 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:23.477506 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:23.485509 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:51:23.498953 ignition[982]: INFO : Ignition 2.14.0 Oct 2 19:51:23.498953 ignition[982]: INFO : Stage: files Oct 2 19:51:23.502838 ignition[982]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:23.502838 ignition[982]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:23.517722 ignition[982]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:23.528493 ignition[982]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:51:23.531806 ignition[982]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:51:23.531806 ignition[982]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:51:23.568947 ignition[982]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:51:23.572979 ignition[982]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:51:23.576529 unknown[982]: wrote ssh authorized keys file for user: core Oct 2 19:51:23.579031 ignition[982]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:51:23.582738 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:51:23.587663 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:51:24.075397 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:51:24.874853 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:51:24.883037 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:51:24.883037 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:51:24.883037 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:51:25.258214 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:51:25.665140 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:51:25.673035 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:51:25.673035 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:51:25.682124 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:51:25.848758 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:51:27.867099 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Oct 2 19:51:27.875049 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:51:27.875049 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:51:27.875049 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:51:28.077935 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:51:31.810831 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Oct 2 19:51:31.819901 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:51:31.819901 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:51:31.819901 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:51:31.959591 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:51:33.986271 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Oct 2 19:51:33.995436 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:51:33.995436 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:51:33.995436 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:51:33.995436 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:51:33.995436 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:51:34.350511 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:51:34.840632 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:51:34.840632 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:51:34.859312 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:51:34.859312 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:51:34.859312 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:51:34.859312 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:51:34.859312 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:51:34.859312 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1492466822" Oct 2 19:51:34.859312 ignition[982]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1492466822": device or resource busy Oct 2 19:51:34.859312 ignition[982]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1492466822", trying btrfs: device or resource busy Oct 2 19:51:34.859312 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1492466822" Oct 2 19:51:34.908055 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (987) Oct 2 19:51:34.908088 kernel: audit: type=1130 audit(1696276294.907:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.874916 systemd[1]: mnt-oem1492466822.mount: Deactivated successfully. Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1492466822" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem1492466822" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem1492466822" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375182872" Oct 2 19:51:34.923372 ignition[982]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375182872": device or resource busy Oct 2 19:51:34.923372 ignition[982]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2375182872", trying btrfs: device or resource busy Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375182872" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375182872" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem2375182872" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem2375182872" Oct 2 19:51:34.923372 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:51:34.923372 ignition[982]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 19:51:34.923372 ignition[982]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 19:51:34.896915 systemd[1]: mnt-oem2375182872.mount: Deactivated successfully. Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:51:34.959621 ignition[982]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:51:34.959621 ignition[982]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:51:34.959621 ignition[982]: INFO : files: files passed Oct 2 19:51:35.107164 kernel: audit: type=1130 audit(1696276294.964:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.107222 kernel: audit: type=1130 audit(1696276295.095:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.904769 systemd[1]: Finished ignition-files.service. Oct 2 19:51:35.127379 kernel: audit: type=1131 audit(1696276295.108:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.127476 ignition[982]: INFO : Ignition finished successfully Oct 2 19:51:35.152811 kernel: audit: type=1130 audit(1696276295.127:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.152844 kernel: audit: type=1131 audit(1696276295.127:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.152964 initrd-setup-root-after-ignition[1006]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:51:34.925307 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:51:34.930254 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:51:34.934405 systemd[1]: Starting ignition-quench.service... Oct 2 19:51:34.943546 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:51:34.978081 systemd[1]: Reached target ignition-complete.target. Oct 2 19:51:34.997883 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:51:35.088593 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:51:35.088730 systemd[1]: Finished ignition-quench.service. Oct 2 19:51:35.123936 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:51:35.124027 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:51:35.127469 systemd[1]: Reached target initrd-fs.target. Oct 2 19:51:35.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.141028 systemd[1]: Reached target initrd.target. Oct 2 19:51:35.206074 kernel: audit: type=1130 audit(1696276295.187:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.158021 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:51:35.167934 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:51:35.185130 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:51:35.188469 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:51:35.222108 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:51:35.224306 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:51:35.228405 systemd[1]: Stopped target timers.target. Oct 2 19:51:35.232502 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:51:35.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.232634 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:51:35.252823 kernel: audit: type=1131 audit(1696276295.236:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.248380 systemd[1]: Stopped target initrd.target. Oct 2 19:51:35.252948 systemd[1]: Stopped target basic.target. Oct 2 19:51:35.256628 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:51:35.260507 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:51:35.264814 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:51:35.269033 systemd[1]: Stopped target remote-fs.target. Oct 2 19:51:35.273280 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:51:35.277399 systemd[1]: Stopped target sysinit.target. Oct 2 19:51:35.281499 systemd[1]: Stopped target local-fs.target. Oct 2 19:51:35.285498 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:51:35.289463 systemd[1]: Stopped target swap.target. Oct 2 19:51:35.293113 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:51:35.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.293274 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:51:35.314031 kernel: audit: type=1131 audit(1696276295.296:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.309361 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:51:35.314121 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:51:35.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.314278 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:51:35.335270 kernel: audit: type=1131 audit(1696276295.318:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.318677 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:51:35.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.331111 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:51:35.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.335477 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:51:35.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.335575 systemd[1]: Stopped ignition-files.service. Oct 2 19:51:35.340315 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:51:35.340448 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:51:35.346233 systemd[1]: Stopping ignition-mount.service... Oct 2 19:51:35.361596 iscsid[832]: iscsid shutting down. Oct 2 19:51:35.363547 ignition[1020]: INFO : Ignition 2.14.0 Oct 2 19:51:35.363547 ignition[1020]: INFO : Stage: umount Oct 2 19:51:35.363547 ignition[1020]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:35.363547 ignition[1020]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:35.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.360013 systemd[1]: Stopping iscsid.service... Oct 2 19:51:35.410186 ignition[1020]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:35.410186 ignition[1020]: INFO : umount: umount passed Oct 2 19:51:35.410186 ignition[1020]: INFO : Ignition finished successfully Oct 2 19:51:35.361615 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:51:35.361848 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:51:35.368742 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:51:35.375561 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:51:35.375741 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:51:35.376118 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:51:35.376245 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:51:35.379546 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:51:35.379652 systemd[1]: Stopped iscsid.service. Oct 2 19:51:35.381126 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:51:35.381273 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:51:35.386272 systemd[1]: Stopping iscsiuio.service... Oct 2 19:51:35.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.387416 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:51:35.387508 systemd[1]: Stopped iscsiuio.service. Oct 2 19:51:35.387790 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:51:35.387865 systemd[1]: Stopped ignition-mount.service. Oct 2 19:51:35.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.388237 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:51:35.388274 systemd[1]: Stopped ignition-disks.service. Oct 2 19:51:35.388586 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:51:35.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.481000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:51:35.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.388617 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:51:35.388995 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:51:35.389025 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:51:35.389557 systemd[1]: Stopped target network.target. Oct 2 19:51:35.389935 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:51:35.389965 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:51:35.390397 systemd[1]: Stopped target paths.target. Oct 2 19:51:35.390791 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:51:35.397231 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:51:35.425347 systemd[1]: Stopped target slices.target. Oct 2 19:51:35.425740 systemd[1]: Stopped target sockets.target. Oct 2 19:51:35.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.426200 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:51:35.426236 systemd[1]: Closed iscsid.socket. Oct 2 19:51:35.426613 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:51:35.426639 systemd[1]: Closed iscsiuio.socket. Oct 2 19:51:35.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.427029 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:51:35.427067 systemd[1]: Stopped ignition-setup.service. Oct 2 19:51:35.427735 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:51:35.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.427941 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:51:35.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.454644 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:51:35.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.454766 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:51:35.459405 systemd-networkd[826]: eth0: DHCPv6 lease lost Oct 2 19:51:35.558000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:51:35.464393 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:51:35.464480 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:51:35.467097 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:51:35.467132 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:51:35.471875 systemd[1]: Stopping network-cleanup.service... Oct 2 19:51:35.476888 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:51:35.476939 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:51:35.478116 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:51:35.478155 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:51:35.587348 kernel: hv_netvsc 000d3a68-d022-000d-3a68-d022000d3a68 eth0: Data path switched from VF: enP18500s1 Oct 2 19:51:35.481165 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:51:35.481759 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:51:35.485994 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:51:35.493678 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:51:35.504230 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:51:35.510664 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:51:35.515783 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:51:35.515848 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:51:35.520352 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:51:35.520400 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:51:35.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.524227 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:51:35.524283 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:51:35.528357 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:51:35.528406 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:51:35.530537 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:51:35.530573 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:51:35.534935 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:51:35.538790 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:51:35.538850 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:51:35.544637 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:51:35.544734 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:51:35.547688 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:51:35.547771 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:51:35.551805 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:51:35.551851 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:51:35.610153 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:51:35.610296 systemd[1]: Stopped network-cleanup.service. Oct 2 19:51:35.663856 systemd-journald[183]: Received SIGTERM from PID 1 (n/a). Oct 2 19:51:35.614021 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:51:35.619329 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:51:35.633897 systemd[1]: Switching root. Oct 2 19:51:35.668516 systemd-journald[183]: Journal stopped Oct 2 19:51:47.460819 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:51:47.460845 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:51:47.460857 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:51:47.460865 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:51:47.460875 kernel: SELinux: policy capability open_perms=1 Oct 2 19:51:47.460883 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:51:47.460892 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:51:47.460902 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:51:47.460910 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:51:47.460918 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:51:47.460926 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:51:47.460935 systemd[1]: Successfully loaded SELinux policy in 286.862ms. Oct 2 19:51:47.460946 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 27.755ms. Oct 2 19:51:47.460959 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:51:47.460971 systemd[1]: Detected virtualization microsoft. Oct 2 19:51:47.460981 systemd[1]: Detected architecture x86-64. Oct 2 19:51:47.460992 systemd[1]: Detected first boot. Oct 2 19:51:47.461002 systemd[1]: Hostname set to . Oct 2 19:51:47.461013 systemd[1]: Initializing machine ID from random generator. Oct 2 19:51:47.461026 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:51:47.461037 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:51:47.461048 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:51:47.461061 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:51:47.461073 kernel: kauditd_printk_skb: 41 callbacks suppressed Oct 2 19:51:47.461082 kernel: audit: type=1334 audit(1696276306.949:89): prog-id=12 op=LOAD Oct 2 19:51:47.461094 kernel: audit: type=1334 audit(1696276306.949:90): prog-id=3 op=UNLOAD Oct 2 19:51:47.461113 kernel: audit: type=1334 audit(1696276306.954:91): prog-id=13 op=LOAD Oct 2 19:51:47.461130 kernel: audit: type=1334 audit(1696276306.964:92): prog-id=14 op=LOAD Oct 2 19:51:47.461149 kernel: audit: type=1334 audit(1696276306.964:93): prog-id=4 op=UNLOAD Oct 2 19:51:47.461165 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:51:47.461183 kernel: audit: type=1334 audit(1696276306.964:94): prog-id=5 op=UNLOAD Oct 2 19:51:47.463006 kernel: audit: type=1131 audit(1696276306.970:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.463030 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:51:47.463047 kernel: audit: type=1334 audit(1696276307.002:96): prog-id=12 op=UNLOAD Oct 2 19:51:47.463058 kernel: audit: type=1130 audit(1696276307.013:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.463069 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:51:47.463079 kernel: audit: type=1131 audit(1696276307.013:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.463091 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:51:47.463100 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:51:47.463113 systemd[1]: Created slice system-getty.slice. Oct 2 19:51:47.463125 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:51:47.463141 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:51:47.463151 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:51:47.463163 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:51:47.463173 systemd[1]: Created slice user.slice. Oct 2 19:51:47.463185 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:51:47.463207 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:51:47.463218 systemd[1]: Set up automount boot.automount. Oct 2 19:51:47.463231 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:51:47.463244 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:51:47.463256 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:51:47.463269 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:51:47.463281 systemd[1]: Reached target integritysetup.target. Oct 2 19:51:47.463292 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:51:47.463304 systemd[1]: Reached target remote-fs.target. Oct 2 19:51:47.463317 systemd[1]: Reached target slices.target. Oct 2 19:51:47.463326 systemd[1]: Reached target swap.target. Oct 2 19:51:47.463341 systemd[1]: Reached target torcx.target. Oct 2 19:51:47.463351 systemd[1]: Reached target veritysetup.target. Oct 2 19:51:47.463364 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:51:47.463373 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:51:47.463387 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:51:47.463397 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:51:47.463412 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:51:47.463421 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:51:47.463434 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:51:47.463444 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:51:47.463457 systemd[1]: Mounting media.mount... Oct 2 19:51:47.463467 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:51:47.463482 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:51:47.463494 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:51:47.463506 systemd[1]: Mounting tmp.mount... Oct 2 19:51:47.463516 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:51:47.463529 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:51:47.463539 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:51:47.463552 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:51:47.463562 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:51:47.463575 systemd[1]: Starting modprobe@drm.service... Oct 2 19:51:47.463585 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:51:47.463599 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:51:47.463609 systemd[1]: Starting modprobe@loop.service... Oct 2 19:51:47.463622 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:51:47.463632 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:51:47.463645 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:51:47.463655 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:51:47.463669 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:51:47.463680 systemd[1]: Stopped systemd-journald.service. Oct 2 19:51:47.463692 systemd[1]: Starting systemd-journald.service... Oct 2 19:51:47.463708 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:51:47.463719 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:51:47.463736 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:51:47.463759 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:51:47.463775 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:51:47.463789 systemd[1]: Stopped verity-setup.service. Oct 2 19:51:47.463805 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:51:47.463819 kernel: loop: module loaded Oct 2 19:51:47.463834 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:51:47.463853 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:51:47.463868 kernel: fuse: init (API version 7.34) Oct 2 19:51:47.463884 systemd[1]: Mounted media.mount. Oct 2 19:51:47.463902 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:51:47.463925 systemd-journald[1134]: Journal started Oct 2 19:51:47.463996 systemd-journald[1134]: Runtime Journal (/run/log/journal/98cb63c4b076413cb4a0c4808592601a) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:51:37.999000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:51:38.750000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:51:38.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:38.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:38.762000 audit: BPF prog-id=10 op=LOAD Oct 2 19:51:38.762000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:51:38.762000 audit: BPF prog-id=11 op=LOAD Oct 2 19:51:38.762000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:51:46.949000 audit: BPF prog-id=12 op=LOAD Oct 2 19:51:46.949000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:51:46.954000 audit: BPF prog-id=13 op=LOAD Oct 2 19:51:46.964000 audit: BPF prog-id=14 op=LOAD Oct 2 19:51:46.964000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:51:46.964000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:51:46.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.002000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:51:47.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.358000 audit: BPF prog-id=15 op=LOAD Oct 2 19:51:47.358000 audit: BPF prog-id=16 op=LOAD Oct 2 19:51:47.358000 audit: BPF prog-id=17 op=LOAD Oct 2 19:51:47.358000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:51:47.358000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:51:47.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.458000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:51:47.458000 audit[1134]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7fffaf99ba40 a2=4000 a3=7fffaf99badc items=0 ppid=1 pid=1134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:47.458000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:51:46.947753 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:51:39.965557 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:51:46.970642 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:51:39.965927 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:51:39.965950 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:51:39.965993 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:51:39.966004 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:51:39.966053 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:51:39.966067 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:51:39.966342 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:51:39.966392 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:51:39.966406 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:51:39.966834 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:51:39.966879 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:51:39.966901 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:51:39.966919 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:51:39.966939 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:51:39.966955 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:51:46.004232 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:46Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:46.004529 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:46Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:46.004671 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:46Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:46.004865 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:46Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:46.004929 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:46Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:51:46.004992 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T19:51:46Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:51:47.472746 systemd[1]: Started systemd-journald.service. Oct 2 19:51:47.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.474365 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:51:47.476985 systemd[1]: Mounted tmp.mount. Oct 2 19:51:47.479097 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:51:47.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.482010 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:51:47.482223 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:51:47.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.485158 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:51:47.485351 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:51:47.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.487856 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:51:47.488026 systemd[1]: Finished modprobe@drm.service. Oct 2 19:51:47.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.490708 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:51:47.490931 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:51:47.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.493861 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:51:47.496328 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:51:47.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.498917 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:51:47.499085 systemd[1]: Finished modprobe@loop.service. Oct 2 19:51:47.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.503188 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:51:47.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.505865 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:51:47.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.509587 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:51:47.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.512504 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:51:47.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.515644 systemd[1]: Reached target network-pre.target. Oct 2 19:51:47.520145 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:51:47.524021 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:51:47.527080 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:51:47.539337 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:51:47.543724 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:51:47.545961 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:51:47.547613 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:51:47.550019 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:51:47.554239 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:51:47.557657 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:51:47.562370 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:51:47.566342 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:51:47.576831 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:51:47.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.580685 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:51:47.583168 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:51:47.585766 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:51:47.591249 udevadm[1176]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:51:47.612318 systemd-journald[1134]: Time spent on flushing to /var/log/journal/98cb63c4b076413cb4a0c4808592601a is 15.469ms for 1173 entries. Oct 2 19:51:47.612318 systemd-journald[1134]: System Journal (/var/log/journal/98cb63c4b076413cb4a0c4808592601a) is 8.0M, max 2.6G, 2.6G free. Oct 2 19:51:47.672594 systemd-journald[1134]: Received client request to flush runtime journal. Oct 2 19:51:47.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:47.620330 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:51:47.673744 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:51:47.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:48.081576 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:51:48.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:48.700619 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:51:48.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:48.703000 audit: BPF prog-id=18 op=LOAD Oct 2 19:51:48.703000 audit: BPF prog-id=19 op=LOAD Oct 2 19:51:48.703000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:51:48.703000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:51:48.704570 systemd[1]: Starting systemd-udevd.service... Oct 2 19:51:48.723284 systemd-udevd[1179]: Using default interface naming scheme 'v252'. Oct 2 19:51:48.945600 systemd[1]: Started systemd-udevd.service. Oct 2 19:51:48.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:48.949000 audit: BPF prog-id=20 op=LOAD Oct 2 19:51:48.951228 systemd[1]: Starting systemd-networkd.service... Oct 2 19:51:48.991474 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:51:49.046000 audit: BPF prog-id=21 op=LOAD Oct 2 19:51:49.046000 audit: BPF prog-id=22 op=LOAD Oct 2 19:51:49.046000 audit: BPF prog-id=23 op=LOAD Oct 2 19:51:49.048383 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:51:49.077222 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 19:51:49.067000 audit[1192]: AVC avc: denied { confidentiality } for pid=1192 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:51:49.088215 kernel: hv_vmbus: registering driver hv_balloon Oct 2 19:51:49.095172 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 19:51:49.095270 kernel: hv_vmbus: registering driver hv_utils Oct 2 19:51:49.101395 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 19:51:49.111838 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 19:51:49.111912 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 19:51:49.067000 audit[1192]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=560c42b54610 a1=f884 a2=7fed7b2bebc5 a3=5 items=10 ppid=1179 pid=1192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:49.067000 audit: CWD cwd="/" Oct 2 19:51:49.067000 audit: PATH item=0 name=(null) inode=15815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=1 name=(null) inode=15816 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=2 name=(null) inode=15815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=3 name=(null) inode=15817 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=4 name=(null) inode=15815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=5 name=(null) inode=15818 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=6 name=(null) inode=15815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=7 name=(null) inode=15821 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=8 name=(null) inode=15815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PATH item=9 name=(null) inode=15822 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:49.067000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:51:49.125813 kernel: Console: switching to colour dummy device 80x25 Oct 2 19:51:49.128607 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:51:49.135214 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:51:49.148318 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 19:51:49.148391 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 19:51:49.148422 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 19:51:48.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:48.947144 systemd-journald[1134]: Time jumped backwards, rotating. Oct 2 19:51:48.871206 systemd[1]: Started systemd-userdbd.service. Oct 2 19:51:49.071610 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1183) Oct 2 19:51:49.114480 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:51:49.130612 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 19:51:49.205033 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:51:49.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:49.208865 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:51:49.249858 systemd-networkd[1189]: lo: Link UP Oct 2 19:51:49.249870 systemd-networkd[1189]: lo: Gained carrier Oct 2 19:51:49.250624 systemd-networkd[1189]: Enumeration completed Oct 2 19:51:49.250801 systemd[1]: Started systemd-networkd.service. Oct 2 19:51:49.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:49.255491 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:51:49.270315 systemd-networkd[1189]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:51:49.327616 kernel: mlx5_core 4844:00:02.0 enP18500s1: Link up Oct 2 19:51:49.366615 kernel: hv_netvsc 000d3a68-d022-000d-3a68-d022000d3a68 eth0: Data path switched to VF: enP18500s1 Oct 2 19:51:49.367965 systemd-networkd[1189]: enP18500s1: Link UP Oct 2 19:51:49.368246 systemd-networkd[1189]: eth0: Link UP Oct 2 19:51:49.368350 systemd-networkd[1189]: eth0: Gained carrier Oct 2 19:51:49.372892 systemd-networkd[1189]: enP18500s1: Gained carrier Oct 2 19:51:49.408734 systemd-networkd[1189]: eth0: DHCPv4 address 10.200.8.19/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:51:49.458839 lvm[1257]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:51:49.488755 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:51:49.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:49.492018 systemd[1]: Reached target cryptsetup.target. Oct 2 19:51:49.495773 systemd[1]: Starting lvm2-activation.service... Oct 2 19:51:49.500403 lvm[1260]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:51:49.519555 systemd[1]: Finished lvm2-activation.service. Oct 2 19:51:49.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:49.522203 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:51:49.524664 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:51:49.524710 systemd[1]: Reached target local-fs.target. Oct 2 19:51:49.526727 systemd[1]: Reached target machines.target. Oct 2 19:51:49.530048 systemd[1]: Starting ldconfig.service... Oct 2 19:51:49.545510 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:51:49.545615 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:51:49.546957 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:51:49.550759 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:51:49.554980 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:51:49.557672 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:51:49.557770 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:51:49.558899 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:51:49.588530 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:51:49.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:49.607186 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1262 (bootctl) Oct 2 19:51:49.608626 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:51:50.968821 systemd-networkd[1189]: eth0: Gained IPv6LL Oct 2 19:51:50.974618 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:51:50.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.095668 systemd-tmpfiles[1265]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:51:51.287330 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:51:51.288023 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:51:51.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.306421 systemd-tmpfiles[1265]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:51:51.408078 systemd-tmpfiles[1265]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:51:51.564474 systemd-fsck[1270]: fsck.fat 4.2 (2021-01-31) Oct 2 19:51:51.564474 systemd-fsck[1270]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:51:51.568519 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:51:51.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.573873 systemd[1]: Mounting boot.mount... Oct 2 19:51:51.590281 systemd[1]: Mounted boot.mount. Oct 2 19:51:51.604234 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:51:51.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.964663 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:51:51.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.968996 systemd[1]: Starting audit-rules.service... Oct 2 19:51:51.970419 kernel: kauditd_printk_skb: 70 callbacks suppressed Oct 2 19:51:51.970471 kernel: audit: type=1130 audit(1696276311.965:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.985096 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:51:51.989166 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:51:51.993597 systemd[1]: Starting systemd-resolved.service... Oct 2 19:51:51.990000 audit: BPF prog-id=24 op=LOAD Oct 2 19:51:52.002893 kernel: audit: type=1334 audit(1696276311.990:155): prog-id=24 op=LOAD Oct 2 19:51:52.000000 audit: BPF prog-id=25 op=LOAD Oct 2 19:51:52.007669 kernel: audit: type=1334 audit(1696276312.000:156): prog-id=25 op=LOAD Oct 2 19:51:52.006503 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:51:52.010809 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:51:52.028000 audit[1285]: SYSTEM_BOOT pid=1285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.043111 kernel: audit: type=1127 audit(1696276312.028:157): pid=1285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.044132 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:51:52.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.051863 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:51:52.062673 kernel: audit: type=1130 audit(1696276312.044:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.062625 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:51:52.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.077616 kernel: audit: type=1130 audit(1696276312.060:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.135484 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:51:52.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.138548 systemd[1]: Reached target time-set.target. Oct 2 19:51:52.153470 kernel: audit: type=1130 audit(1696276312.136:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.153842 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:51:52.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.170641 kernel: audit: type=1130 audit(1696276312.154:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.186445 systemd-resolved[1280]: Positive Trust Anchors: Oct 2 19:51:52.186466 systemd-resolved[1280]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:51:52.186506 systemd-resolved[1280]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:51:52.194000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:51:52.197155 augenrules[1297]: No rules Oct 2 19:51:52.203757 systemd[1]: Finished audit-rules.service. Oct 2 19:51:52.207627 kernel: audit: type=1305 audit(1696276312.194:162): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:51:52.207695 kernel: audit: type=1300 audit(1696276312.194:162): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd9864e5a0 a2=420 a3=0 items=0 ppid=1276 pid=1297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:52.194000 audit[1297]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd9864e5a0 a2=420 a3=0 items=0 ppid=1276 pid=1297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:52.194000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:51:52.318621 systemd-resolved[1280]: Using system hostname 'ci-3510.3.0-a-74431cd9b5'. Oct 2 19:51:52.320378 systemd[1]: Started systemd-resolved.service. Oct 2 19:51:52.323102 systemd[1]: Reached target network.target. Oct 2 19:51:52.325484 systemd[1]: Reached target network-online.target. Oct 2 19:51:52.327972 systemd[1]: Reached target nss-lookup.target. Oct 2 19:51:52.396739 systemd-timesyncd[1283]: Contacted time server 88.81.100.130:123 (0.flatcar.pool.ntp.org). Oct 2 19:51:52.396821 systemd-timesyncd[1283]: Initial clock synchronization to Mon 2023-10-02 19:51:52.396681 UTC. Oct 2 19:51:56.577818 ldconfig[1261]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:51:56.588584 systemd[1]: Finished ldconfig.service. Oct 2 19:51:56.593038 systemd[1]: Starting systemd-update-done.service... Oct 2 19:51:56.625662 systemd[1]: Finished systemd-update-done.service. Oct 2 19:51:56.628563 systemd[1]: Reached target sysinit.target. Oct 2 19:51:56.630699 systemd[1]: Started motdgen.path. Oct 2 19:51:56.632552 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:51:56.635730 systemd[1]: Started logrotate.timer. Oct 2 19:51:56.637621 systemd[1]: Started mdadm.timer. Oct 2 19:51:56.639351 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:51:56.641518 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:51:56.641557 systemd[1]: Reached target paths.target. Oct 2 19:51:56.643380 systemd[1]: Reached target timers.target. Oct 2 19:51:56.645916 systemd[1]: Listening on dbus.socket. Oct 2 19:51:56.649009 systemd[1]: Starting docker.socket... Oct 2 19:51:56.664101 systemd[1]: Listening on sshd.socket. Oct 2 19:51:56.666497 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:51:56.667017 systemd[1]: Listening on docker.socket. Oct 2 19:51:56.669145 systemd[1]: Reached target sockets.target. Oct 2 19:51:56.671082 systemd[1]: Reached target basic.target. Oct 2 19:51:56.672968 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:51:56.673004 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:51:56.674137 systemd[1]: Starting containerd.service... Oct 2 19:51:56.678288 systemd[1]: Starting dbus.service... Oct 2 19:51:56.681091 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:51:56.684478 systemd[1]: Starting extend-filesystems.service... Oct 2 19:51:56.686572 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:51:56.687989 systemd[1]: Starting motdgen.service... Oct 2 19:51:56.694639 systemd[1]: Started nvidia.service. Oct 2 19:51:56.697660 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:51:56.701122 systemd[1]: Starting prepare-critools.service... Oct 2 19:51:56.704297 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:51:56.707705 systemd[1]: Starting sshd-keygen.service... Oct 2 19:51:56.712727 systemd[1]: Starting systemd-logind.service... Oct 2 19:51:56.716336 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:51:56.716420 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:51:56.717000 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:51:56.717818 systemd[1]: Starting update-engine.service... Oct 2 19:51:56.722699 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:51:56.733694 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:51:56.733912 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:51:56.772078 jq[1320]: true Oct 2 19:51:56.776283 jq[1307]: false Oct 2 19:51:56.776690 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:51:56.776885 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:51:56.778270 extend-filesystems[1308]: Found sda Oct 2 19:51:56.778270 extend-filesystems[1308]: Found sda1 Oct 2 19:51:56.786834 extend-filesystems[1308]: Found sda2 Oct 2 19:51:56.786834 extend-filesystems[1308]: Found sda3 Oct 2 19:51:56.786834 extend-filesystems[1308]: Found usr Oct 2 19:51:56.786834 extend-filesystems[1308]: Found sda4 Oct 2 19:51:56.786834 extend-filesystems[1308]: Found sda6 Oct 2 19:51:56.786834 extend-filesystems[1308]: Found sda7 Oct 2 19:51:56.786834 extend-filesystems[1308]: Found sda9 Oct 2 19:51:56.786834 extend-filesystems[1308]: Checking size of /dev/sda9 Oct 2 19:51:56.791107 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:51:56.791268 systemd[1]: Finished motdgen.service. Oct 2 19:51:56.815805 jq[1335]: true Oct 2 19:51:56.837926 systemd-logind[1317]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:51:56.838938 systemd-logind[1317]: New seat seat0. Oct 2 19:51:56.855579 extend-filesystems[1308]: Old size kept for /dev/sda9 Oct 2 19:51:56.866783 extend-filesystems[1308]: Found sr0 Oct 2 19:51:56.868765 env[1336]: time="2023-10-02T19:51:56.862900176Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:51:56.856141 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:51:56.856324 systemd[1]: Finished extend-filesystems.service. Oct 2 19:51:56.904750 dbus-daemon[1306]: [system] SELinux support is enabled Oct 2 19:51:56.904954 systemd[1]: Started dbus.service. Oct 2 19:51:56.912506 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:51:56.912551 systemd[1]: Reached target system-config.target. Oct 2 19:51:56.915776 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:51:56.923367 tar[1327]: crictl Oct 2 19:51:56.924374 tar[1326]: ./ Oct 2 19:51:56.924374 tar[1326]: ./loopback Oct 2 19:51:56.915803 systemd[1]: Reached target user-config.target. Oct 2 19:51:56.926106 systemd[1]: Started systemd-logind.service. Oct 2 19:51:56.927624 dbus-daemon[1306]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:51:56.947955 bash[1359]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:51:56.948838 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:51:56.971006 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:51:57.009789 tar[1326]: ./bandwidth Oct 2 19:51:57.029652 env[1336]: time="2023-10-02T19:51:57.029039070Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:51:57.029652 env[1336]: time="2023-10-02T19:51:57.029239871Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:51:57.033939 env[1336]: time="2023-10-02T19:51:57.033885384Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:51:57.033939 env[1336]: time="2023-10-02T19:51:57.033935684Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:51:57.034286 env[1336]: time="2023-10-02T19:51:57.034255285Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:51:57.034354 env[1336]: time="2023-10-02T19:51:57.034290085Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:51:57.034354 env[1336]: time="2023-10-02T19:51:57.034309785Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:51:57.034354 env[1336]: time="2023-10-02T19:51:57.034323685Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:51:57.034466 env[1336]: time="2023-10-02T19:51:57.034430185Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:51:57.034771 env[1336]: time="2023-10-02T19:51:57.034744586Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:51:57.034974 env[1336]: time="2023-10-02T19:51:57.034948387Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:51:57.035022 env[1336]: time="2023-10-02T19:51:57.034976787Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:51:57.035065 env[1336]: time="2023-10-02T19:51:57.035047387Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:51:57.035109 env[1336]: time="2023-10-02T19:51:57.035066187Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:51:57.050667 env[1336]: time="2023-10-02T19:51:57.050581331Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:51:57.050801 env[1336]: time="2023-10-02T19:51:57.050687331Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:51:57.050801 env[1336]: time="2023-10-02T19:51:57.050708231Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:51:57.050801 env[1336]: time="2023-10-02T19:51:57.050772532Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.050910 env[1336]: time="2023-10-02T19:51:57.050880032Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.050910 env[1336]: time="2023-10-02T19:51:57.050904232Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.050982 env[1336]: time="2023-10-02T19:51:57.050924332Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.050982 env[1336]: time="2023-10-02T19:51:57.050958732Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.051052 env[1336]: time="2023-10-02T19:51:57.050978732Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.051052 env[1336]: time="2023-10-02T19:51:57.050999532Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.051052 env[1336]: time="2023-10-02T19:51:57.051032432Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.051148 env[1336]: time="2023-10-02T19:51:57.051053132Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:51:57.051243 env[1336]: time="2023-10-02T19:51:57.051219833Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:51:57.051404 env[1336]: time="2023-10-02T19:51:57.051379033Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:51:57.051934 env[1336]: time="2023-10-02T19:51:57.051900935Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:51:57.052020 env[1336]: time="2023-10-02T19:51:57.051963035Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052020 env[1336]: time="2023-10-02T19:51:57.051983035Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:51:57.052092 env[1336]: time="2023-10-02T19:51:57.052067335Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052092 env[1336]: time="2023-10-02T19:51:57.052087135Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052190 env[1336]: time="2023-10-02T19:51:57.052104935Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052242 env[1336]: time="2023-10-02T19:51:57.052210936Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052242 env[1336]: time="2023-10-02T19:51:57.052233036Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052308 env[1336]: time="2023-10-02T19:51:57.052250936Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052308 env[1336]: time="2023-10-02T19:51:57.052280836Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052308 env[1336]: time="2023-10-02T19:51:57.052303236Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052417 env[1336]: time="2023-10-02T19:51:57.052325936Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:51:57.052551 env[1336]: time="2023-10-02T19:51:57.052530736Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052616 env[1336]: time="2023-10-02T19:51:57.052560537Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052616 env[1336]: time="2023-10-02T19:51:57.052577837Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.052693 env[1336]: time="2023-10-02T19:51:57.052618637Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:51:57.052693 env[1336]: time="2023-10-02T19:51:57.052643937Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:51:57.052693 env[1336]: time="2023-10-02T19:51:57.052660037Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:51:57.052794 env[1336]: time="2023-10-02T19:51:57.052706837Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:51:57.052794 env[1336]: time="2023-10-02T19:51:57.052753537Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:51:57.053144 env[1336]: time="2023-10-02T19:51:57.053064638Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.053175638Z" level=info msg="Connect containerd service" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.053218438Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.058747354Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.058914754Z" level=info msg="Start subscribing containerd event" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.058975455Z" level=info msg="Start recovering state" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.059061955Z" level=info msg="Start event monitor" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.059086655Z" level=info msg="Start snapshots syncer" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.059103255Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.059114955Z" level=info msg="Start streaming server" Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.059151655Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.059216455Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:51:57.079248 env[1336]: time="2023-10-02T19:51:57.059284556Z" level=info msg="containerd successfully booted in 0.208195s" Oct 2 19:51:57.059386 systemd[1]: Started containerd.service. Oct 2 19:51:57.082308 tar[1326]: ./ptp Oct 2 19:51:57.181122 tar[1326]: ./vlan Oct 2 19:51:57.243960 tar[1326]: ./host-device Oct 2 19:51:57.290151 tar[1326]: ./tuning Oct 2 19:51:57.331539 tar[1326]: ./vrf Oct 2 19:51:57.375120 tar[1326]: ./sbr Oct 2 19:51:57.417247 tar[1326]: ./tap Oct 2 19:51:57.443244 update_engine[1318]: I1002 19:51:57.429606 1318 main.cc:92] Flatcar Update Engine starting Oct 2 19:51:57.466324 tar[1326]: ./dhcp Oct 2 19:51:57.482558 systemd[1]: Started update-engine.service. Oct 2 19:51:57.488216 systemd[1]: Started locksmithd.service. Oct 2 19:51:57.491580 update_engine[1318]: I1002 19:51:57.491452 1318 update_check_scheduler.cc:74] Next update check in 10m1s Oct 2 19:51:57.598409 tar[1326]: ./static Oct 2 19:51:57.631368 tar[1326]: ./firewall Oct 2 19:51:57.681163 tar[1326]: ./macvlan Oct 2 19:51:57.726529 tar[1326]: ./dummy Oct 2 19:51:57.815608 tar[1326]: ./bridge Oct 2 19:51:57.863027 tar[1326]: ./ipvlan Oct 2 19:51:57.926927 tar[1326]: ./portmap Oct 2 19:51:57.979240 sshd_keygen[1328]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:51:58.010721 tar[1326]: ./host-local Oct 2 19:51:58.013959 systemd[1]: Finished sshd-keygen.service. Oct 2 19:51:58.018836 systemd[1]: Starting issuegen.service... Oct 2 19:51:58.022669 systemd[1]: Started waagent.service. Oct 2 19:51:58.039306 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:51:58.039487 systemd[1]: Finished issuegen.service. Oct 2 19:51:58.043702 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:51:58.057572 systemd[1]: Finished prepare-critools.service. Oct 2 19:51:58.067875 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:51:58.072431 systemd[1]: Started getty@tty1.service. Oct 2 19:51:58.076162 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:51:58.078870 systemd[1]: Reached target getty.target. Oct 2 19:51:58.097987 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:51:58.100778 systemd[1]: Reached target multi-user.target. Oct 2 19:51:58.104919 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:51:58.114268 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:51:58.114466 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:51:58.117189 systemd[1]: Startup finished in 736ms (firmware) + 20.097s (loader) + 936ms (kernel) + 21.795s (initrd) + 20.885s (userspace) = 1min 4.451s. Oct 2 19:51:58.433872 login[1424]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:51:58.435865 login[1425]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:51:58.468365 systemd[1]: Created slice user-500.slice. Oct 2 19:51:58.470025 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:51:58.472651 systemd-logind[1317]: New session 2 of user core. Oct 2 19:51:58.476094 systemd-logind[1317]: New session 1 of user core. Oct 2 19:51:58.492189 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:51:58.493925 systemd[1]: Starting user@500.service... Oct 2 19:51:58.497250 (systemd)[1433]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:51:58.636912 systemd[1433]: Queued start job for default target default.target. Oct 2 19:51:58.637531 systemd[1433]: Reached target paths.target. Oct 2 19:51:58.637561 systemd[1433]: Reached target sockets.target. Oct 2 19:51:58.637579 systemd[1433]: Reached target timers.target. Oct 2 19:51:58.637612 systemd[1433]: Reached target basic.target. Oct 2 19:51:58.637741 systemd[1]: Started user@500.service. Oct 2 19:51:58.639019 systemd[1]: Started session-1.scope. Oct 2 19:51:58.639840 systemd[1]: Started session-2.scope. Oct 2 19:51:58.640773 systemd[1433]: Reached target default.target. Oct 2 19:51:58.640828 systemd[1433]: Startup finished in 137ms. Oct 2 19:51:59.074984 locksmithd[1408]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:52:03.817802 waagent[1417]: 2023-10-02T19:52:03.817684Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 19:52:03.822452 waagent[1417]: 2023-10-02T19:52:03.822364Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 19:52:03.825100 waagent[1417]: 2023-10-02T19:52:03.825025Z INFO Daemon Daemon Python: 3.9.16 Oct 2 19:52:03.827695 waagent[1417]: 2023-10-02T19:52:03.827615Z INFO Daemon Daemon Run daemon Oct 2 19:52:03.830300 waagent[1417]: 2023-10-02T19:52:03.830235Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 19:52:03.843537 waagent[1417]: 2023-10-02T19:52:03.843414Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:52:03.852044 waagent[1417]: 2023-10-02T19:52:03.851931Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:52:03.857329 waagent[1417]: 2023-10-02T19:52:03.857264Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:52:03.860116 waagent[1417]: 2023-10-02T19:52:03.860053Z INFO Daemon Daemon Using waagent for provisioning Oct 2 19:52:03.863331 waagent[1417]: 2023-10-02T19:52:03.863268Z INFO Daemon Daemon Activate resource disk Oct 2 19:52:03.866089 waagent[1417]: 2023-10-02T19:52:03.866028Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 19:52:03.876515 waagent[1417]: 2023-10-02T19:52:03.876435Z INFO Daemon Daemon Found device: None Oct 2 19:52:03.879245 waagent[1417]: 2023-10-02T19:52:03.879176Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 19:52:03.883503 waagent[1417]: 2023-10-02T19:52:03.883436Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 19:52:03.889807 waagent[1417]: 2023-10-02T19:52:03.889743Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:52:03.893216 waagent[1417]: 2023-10-02T19:52:03.893151Z INFO Daemon Daemon Running default provisioning handler Oct 2 19:52:03.904402 waagent[1417]: 2023-10-02T19:52:03.904259Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:52:03.913186 waagent[1417]: 2023-10-02T19:52:03.913070Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:52:03.918246 waagent[1417]: 2023-10-02T19:52:03.918175Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:52:03.920939 waagent[1417]: 2023-10-02T19:52:03.920877Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 19:52:03.941148 waagent[1417]: 2023-10-02T19:52:03.940998Z INFO Daemon Daemon Successfully mounted dvd Oct 2 19:52:04.004459 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 19:52:04.021083 waagent[1417]: 2023-10-02T19:52:04.020940Z INFO Daemon Daemon Detect protocol endpoint Oct 2 19:52:04.037168 waagent[1417]: 2023-10-02T19:52:04.021507Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:52:04.037168 waagent[1417]: 2023-10-02T19:52:04.022693Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 19:52:04.037168 waagent[1417]: 2023-10-02T19:52:04.023558Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 19:52:04.037168 waagent[1417]: 2023-10-02T19:52:04.024728Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 19:52:04.037168 waagent[1417]: 2023-10-02T19:52:04.025488Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 19:52:04.215905 waagent[1417]: 2023-10-02T19:52:04.215753Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 19:52:04.220003 waagent[1417]: 2023-10-02T19:52:04.219958Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 19:52:04.222958 waagent[1417]: 2023-10-02T19:52:04.222897Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 19:52:04.839743 waagent[1417]: 2023-10-02T19:52:04.839550Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 19:52:04.852392 waagent[1417]: 2023-10-02T19:52:04.852305Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 19:52:04.855815 waagent[1417]: 2023-10-02T19:52:04.855744Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 19:52:04.937188 waagent[1417]: 2023-10-02T19:52:04.937046Z INFO Daemon Daemon Found private key matching thumbprint D3594E87515ED13328977EEF146E1FC5332A9693 Oct 2 19:52:04.947660 waagent[1417]: 2023-10-02T19:52:04.937576Z INFO Daemon Daemon Certificate with thumbprint F593E67D9DD51F8C8507A1E76F1E879EB5F15ED9 has no matching private key. Oct 2 19:52:04.947660 waagent[1417]: 2023-10-02T19:52:04.938744Z INFO Daemon Daemon Fetch goal state completed Oct 2 19:52:04.976320 waagent[1417]: 2023-10-02T19:52:04.976215Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: d6018376-85eb-4c27-952e-72a7455d961c New eTag: 16736181141414425381] Oct 2 19:52:04.984637 waagent[1417]: 2023-10-02T19:52:04.977408Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:52:04.990881 waagent[1417]: 2023-10-02T19:52:04.990816Z INFO Daemon Daemon Starting provisioning Oct 2 19:52:04.997665 waagent[1417]: 2023-10-02T19:52:04.991175Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 19:52:04.997665 waagent[1417]: 2023-10-02T19:52:04.992143Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-74431cd9b5] Oct 2 19:52:05.006702 waagent[1417]: 2023-10-02T19:52:05.006555Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-74431cd9b5] Oct 2 19:52:05.014207 waagent[1417]: 2023-10-02T19:52:05.007326Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 19:52:05.014207 waagent[1417]: 2023-10-02T19:52:05.008401Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 19:52:05.022654 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 19:52:05.022918 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 19:52:05.023006 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 19:52:05.023324 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:52:05.028648 systemd-networkd[1189]: eth0: DHCPv6 lease lost Oct 2 19:52:05.030113 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:52:05.030313 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:52:05.032974 systemd[1]: Starting systemd-networkd.service... Oct 2 19:52:05.063778 systemd-networkd[1473]: enP18500s1: Link UP Oct 2 19:52:05.063788 systemd-networkd[1473]: enP18500s1: Gained carrier Oct 2 19:52:05.065158 systemd-networkd[1473]: eth0: Link UP Oct 2 19:52:05.065166 systemd-networkd[1473]: eth0: Gained carrier Oct 2 19:52:05.065699 systemd-networkd[1473]: lo: Link UP Oct 2 19:52:05.065798 systemd-networkd[1473]: lo: Gained carrier Oct 2 19:52:05.066181 systemd-networkd[1473]: eth0: Gained IPv6LL Oct 2 19:52:05.066472 systemd-networkd[1473]: Enumeration completed Oct 2 19:52:05.066623 systemd[1]: Started systemd-networkd.service. Oct 2 19:52:05.069175 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:52:05.074377 waagent[1417]: 2023-10-02T19:52:05.071254Z INFO Daemon Daemon Create user account if not exists Oct 2 19:52:05.074377 waagent[1417]: 2023-10-02T19:52:05.072213Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 19:52:05.074377 waagent[1417]: 2023-10-02T19:52:05.073295Z INFO Daemon Daemon Configure sudoer Oct 2 19:52:05.074940 waagent[1417]: 2023-10-02T19:52:05.074884Z INFO Daemon Daemon Configure sshd Oct 2 19:52:05.076002 waagent[1417]: 2023-10-02T19:52:05.075951Z INFO Daemon Daemon Deploy ssh public key. Oct 2 19:52:05.078561 systemd-networkd[1473]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:52:05.118046 waagent[1417]: 2023-10-02T19:52:05.117870Z INFO Daemon Daemon Decode custom data Oct 2 19:52:05.122315 waagent[1417]: 2023-10-02T19:52:05.118557Z INFO Daemon Daemon Save custom data Oct 2 19:52:05.132697 systemd-networkd[1473]: eth0: DHCPv4 address 10.200.8.19/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:52:05.135204 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:52:35.395251 waagent[1417]: 2023-10-02T19:52:35.395141Z INFO Daemon Daemon Provisioning complete Oct 2 19:52:35.411986 waagent[1417]: 2023-10-02T19:52:35.411901Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 19:52:35.415482 waagent[1417]: 2023-10-02T19:52:35.415404Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 19:52:35.421289 waagent[1417]: 2023-10-02T19:52:35.421217Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 19:52:35.690077 waagent[1482]: 2023-10-02T19:52:35.689886Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 19:52:35.690817 waagent[1482]: 2023-10-02T19:52:35.690752Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:35.690969 waagent[1482]: 2023-10-02T19:52:35.690915Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:35.702638 waagent[1482]: 2023-10-02T19:52:35.702554Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 19:52:35.702802 waagent[1482]: 2023-10-02T19:52:35.702747Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 19:52:35.765125 waagent[1482]: 2023-10-02T19:52:35.765000Z INFO ExtHandler ExtHandler Found private key matching thumbprint D3594E87515ED13328977EEF146E1FC5332A9693 Oct 2 19:52:35.765351 waagent[1482]: 2023-10-02T19:52:35.765290Z INFO ExtHandler ExtHandler Certificate with thumbprint F593E67D9DD51F8C8507A1E76F1E879EB5F15ED9 has no matching private key. Oct 2 19:52:35.765607 waagent[1482]: 2023-10-02T19:52:35.765538Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 19:52:35.784232 waagent[1482]: 2023-10-02T19:52:35.784162Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 7b1c887f-a74f-4959-8636-d5712591c92e New eTag: 16736181141414425381] Oct 2 19:52:35.784900 waagent[1482]: 2023-10-02T19:52:35.784838Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:52:35.865035 waagent[1482]: 2023-10-02T19:52:35.864868Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:52:35.876938 waagent[1482]: 2023-10-02T19:52:35.876850Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1482 Oct 2 19:52:35.880390 waagent[1482]: 2023-10-02T19:52:35.880320Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:52:35.881656 waagent[1482]: 2023-10-02T19:52:35.881581Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:52:35.956323 waagent[1482]: 2023-10-02T19:52:35.956200Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:52:35.956710 waagent[1482]: 2023-10-02T19:52:35.956644Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:52:35.965162 waagent[1482]: 2023-10-02T19:52:35.965104Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:52:35.965696 waagent[1482]: 2023-10-02T19:52:35.965637Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:52:35.966812 waagent[1482]: 2023-10-02T19:52:35.966750Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 19:52:35.968084 waagent[1482]: 2023-10-02T19:52:35.968026Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:52:35.968944 waagent[1482]: 2023-10-02T19:52:35.968888Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:52:35.969222 waagent[1482]: 2023-10-02T19:52:35.969169Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:35.969491 waagent[1482]: 2023-10-02T19:52:35.969437Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:35.969868 waagent[1482]: 2023-10-02T19:52:35.969814Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:35.970099 waagent[1482]: 2023-10-02T19:52:35.970045Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:52:35.970391 waagent[1482]: 2023-10-02T19:52:35.970338Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:52:35.970907 waagent[1482]: 2023-10-02T19:52:35.970851Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:52:35.971071 waagent[1482]: 2023-10-02T19:52:35.971023Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:35.971400 waagent[1482]: 2023-10-02T19:52:35.971349Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:52:35.972062 waagent[1482]: 2023-10-02T19:52:35.972007Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:52:35.972219 waagent[1482]: 2023-10-02T19:52:35.972164Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:52:35.973084 waagent[1482]: 2023-10-02T19:52:35.973026Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:52:35.973084 waagent[1482]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:52:35.973084 waagent[1482]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:52:35.973084 waagent[1482]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:52:35.973084 waagent[1482]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:35.973084 waagent[1482]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:35.973084 waagent[1482]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:35.976339 waagent[1482]: 2023-10-02T19:52:35.976140Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:52:35.977077 waagent[1482]: 2023-10-02T19:52:35.976998Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:52:35.979043 waagent[1482]: 2023-10-02T19:52:35.978996Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:52:35.988049 waagent[1482]: 2023-10-02T19:52:35.987994Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 19:52:35.988674 waagent[1482]: 2023-10-02T19:52:35.988625Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:52:35.991735 waagent[1482]: 2023-10-02T19:52:35.991682Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 19:52:36.011697 waagent[1482]: 2023-10-02T19:52:36.011614Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1473' Oct 2 19:52:36.037022 waagent[1482]: 2023-10-02T19:52:36.036949Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 19:52:36.083130 waagent[1482]: 2023-10-02T19:52:36.082972Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:52:36.083130 waagent[1482]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:52:36.083130 waagent[1482]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:52:36.083130 waagent[1482]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:68:d0:22 brd ff:ff:ff:ff:ff:ff Oct 2 19:52:36.083130 waagent[1482]: 3: enP18500s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:68:d0:22 brd ff:ff:ff:ff:ff:ff\ altname enP18500p0s2 Oct 2 19:52:36.083130 waagent[1482]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:52:36.083130 waagent[1482]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:52:36.083130 waagent[1482]: 2: eth0 inet 10.200.8.19/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:52:36.083130 waagent[1482]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:52:36.083130 waagent[1482]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:52:36.083130 waagent[1482]: 2: eth0 inet6 fe80::20d:3aff:fe68:d022/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:52:36.260025 waagent[1482]: 2023-10-02T19:52:36.259824Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 19:52:36.262917 waagent[1482]: 2023-10-02T19:52:36.262800Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 19:52:36.262917 waagent[1482]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:36.262917 waagent[1482]: pkts bytes target prot opt in out source destination Oct 2 19:52:36.262917 waagent[1482]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:36.262917 waagent[1482]: pkts bytes target prot opt in out source destination Oct 2 19:52:36.262917 waagent[1482]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:36.262917 waagent[1482]: pkts bytes target prot opt in out source destination Oct 2 19:52:36.262917 waagent[1482]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:52:36.262917 waagent[1482]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:52:36.264305 waagent[1482]: 2023-10-02T19:52:36.264249Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 19:52:36.527659 waagent[1482]: 2023-10-02T19:52:36.527490Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 19:52:36.967406 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 19:52:37.426136 waagent[1417]: 2023-10-02T19:52:37.425956Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 19:52:37.433649 waagent[1417]: 2023-10-02T19:52:37.433558Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 19:52:38.421744 waagent[1523]: 2023-10-02T19:52:38.421625Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 19:52:38.422449 waagent[1523]: 2023-10-02T19:52:38.422379Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 19:52:38.422608 waagent[1523]: 2023-10-02T19:52:38.422539Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 19:52:38.432279 waagent[1523]: 2023-10-02T19:52:38.432176Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:52:38.432681 waagent[1523]: 2023-10-02T19:52:38.432622Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:38.432846 waagent[1523]: 2023-10-02T19:52:38.432797Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:38.444774 waagent[1523]: 2023-10-02T19:52:38.444696Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 19:52:38.453814 waagent[1523]: 2023-10-02T19:52:38.453753Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 19:52:38.454764 waagent[1523]: 2023-10-02T19:52:38.454706Z INFO ExtHandler Oct 2 19:52:38.454924 waagent[1523]: 2023-10-02T19:52:38.454873Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 9eb71179-f104-4203-b307-e18c1035e196 eTag: 16736181141414425381 source: Fabric] Oct 2 19:52:38.455636 waagent[1523]: 2023-10-02T19:52:38.455565Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 19:52:38.456757 waagent[1523]: 2023-10-02T19:52:38.456699Z INFO ExtHandler Oct 2 19:52:38.456892 waagent[1523]: 2023-10-02T19:52:38.456843Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 19:52:38.463961 waagent[1523]: 2023-10-02T19:52:38.463902Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 19:52:38.464423 waagent[1523]: 2023-10-02T19:52:38.464373Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:52:38.484899 waagent[1523]: 2023-10-02T19:52:38.484838Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 19:52:38.552132 waagent[1523]: 2023-10-02T19:52:38.551985Z INFO ExtHandler Downloaded certificate {'thumbprint': 'F593E67D9DD51F8C8507A1E76F1E879EB5F15ED9', 'hasPrivateKey': False} Oct 2 19:52:38.553156 waagent[1523]: 2023-10-02T19:52:38.553085Z INFO ExtHandler Downloaded certificate {'thumbprint': 'D3594E87515ED13328977EEF146E1FC5332A9693', 'hasPrivateKey': True} Oct 2 19:52:38.554147 waagent[1523]: 2023-10-02T19:52:38.554085Z INFO ExtHandler Fetch goal state completed Oct 2 19:52:38.576920 waagent[1523]: 2023-10-02T19:52:38.576844Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1523 Oct 2 19:52:38.580218 waagent[1523]: 2023-10-02T19:52:38.580155Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:52:38.581701 waagent[1523]: 2023-10-02T19:52:38.581643Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:52:38.586694 waagent[1523]: 2023-10-02T19:52:38.586637Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:52:38.587057 waagent[1523]: 2023-10-02T19:52:38.587001Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:52:38.594982 waagent[1523]: 2023-10-02T19:52:38.594926Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:52:38.595442 waagent[1523]: 2023-10-02T19:52:38.595381Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:52:38.614948 waagent[1523]: 2023-10-02T19:52:38.614843Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 19:52:38.617709 waagent[1523]: 2023-10-02T19:52:38.617611Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 19:52:38.623069 waagent[1523]: 2023-10-02T19:52:38.623009Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 19:52:38.624454 waagent[1523]: 2023-10-02T19:52:38.624395Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:52:38.624901 waagent[1523]: 2023-10-02T19:52:38.624846Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:38.625062 waagent[1523]: 2023-10-02T19:52:38.625013Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:38.625583 waagent[1523]: 2023-10-02T19:52:38.625527Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:52:38.625885 waagent[1523]: 2023-10-02T19:52:38.625830Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:52:38.625885 waagent[1523]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:52:38.625885 waagent[1523]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:52:38.625885 waagent[1523]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:52:38.625885 waagent[1523]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:38.625885 waagent[1523]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:38.625885 waagent[1523]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:38.628790 waagent[1523]: 2023-10-02T19:52:38.628697Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:38.629016 waagent[1523]: 2023-10-02T19:52:38.628943Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:52:38.631792 waagent[1523]: 2023-10-02T19:52:38.631513Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:38.632821 waagent[1523]: 2023-10-02T19:52:38.632742Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:52:38.633259 waagent[1523]: 2023-10-02T19:52:38.633144Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:52:38.633455 waagent[1523]: 2023-10-02T19:52:38.633391Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:52:38.636122 waagent[1523]: 2023-10-02T19:52:38.636054Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:52:38.636563 waagent[1523]: 2023-10-02T19:52:38.636510Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:52:38.637176 waagent[1523]: 2023-10-02T19:52:38.637120Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:52:38.637540 waagent[1523]: 2023-10-02T19:52:38.637489Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:52:38.639570 waagent[1523]: 2023-10-02T19:52:38.639400Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:52:38.642215 waagent[1523]: 2023-10-02T19:52:38.642115Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:52:38.642215 waagent[1523]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:52:38.642215 waagent[1523]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:52:38.642215 waagent[1523]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:68:d0:22 brd ff:ff:ff:ff:ff:ff Oct 2 19:52:38.642215 waagent[1523]: 3: enP18500s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:68:d0:22 brd ff:ff:ff:ff:ff:ff\ altname enP18500p0s2 Oct 2 19:52:38.642215 waagent[1523]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:52:38.642215 waagent[1523]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:52:38.642215 waagent[1523]: 2: eth0 inet 10.200.8.19/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:52:38.642215 waagent[1523]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:52:38.642215 waagent[1523]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:52:38.642215 waagent[1523]: 2: eth0 inet6 fe80::20d:3aff:fe68:d022/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:52:38.654682 waagent[1523]: 2023-10-02T19:52:38.654611Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 19:52:38.698415 waagent[1523]: 2023-10-02T19:52:38.698288Z INFO ExtHandler ExtHandler Oct 2 19:52:38.700283 waagent[1523]: 2023-10-02T19:52:38.700214Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: e0fb6a20-ca0a-4e07-82c3-cfe32233c994 correlation fb3c2723-1171-4b71-9061-1dceb21f072a created: 2023-10-02T19:50:43.403946Z] Oct 2 19:52:38.703258 waagent[1523]: 2023-10-02T19:52:38.703186Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 19:52:38.705323 waagent[1523]: 2023-10-02T19:52:38.705267Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 6 ms] Oct 2 19:52:38.729020 waagent[1523]: 2023-10-02T19:52:38.728908Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 19:52:38.729020 waagent[1523]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:38.729020 waagent[1523]: pkts bytes target prot opt in out source destination Oct 2 19:52:38.729020 waagent[1523]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:38.729020 waagent[1523]: pkts bytes target prot opt in out source destination Oct 2 19:52:38.729020 waagent[1523]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:38.729020 waagent[1523]: pkts bytes target prot opt in out source destination Oct 2 19:52:38.729020 waagent[1523]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 19:52:38.729020 waagent[1523]: 173 21907 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:52:38.729020 waagent[1523]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:52:38.740737 waagent[1523]: 2023-10-02T19:52:38.740664Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 19:52:38.751448 waagent[1523]: 2023-10-02T19:52:38.751366Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 5FA4C354-845C-435F-BBD8-3103B54BA7F9;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 19:52:42.504874 update_engine[1318]: I1002 19:52:42.504782 1318 update_attempter.cc:505] Updating boot flags... Oct 2 19:53:20.435150 systemd[1]: Created slice system-sshd.slice. Oct 2 19:53:20.436806 systemd[1]: Started sshd@0-10.200.8.19:22-10.200.12.6:55050.service. Oct 2 19:53:21.200855 sshd[1604]: Accepted publickey for core from 10.200.12.6 port 55050 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:21.202552 sshd[1604]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:21.206301 systemd-logind[1317]: New session 3 of user core. Oct 2 19:53:21.207894 systemd[1]: Started session-3.scope. Oct 2 19:53:21.740376 systemd[1]: Started sshd@1-10.200.8.19:22-10.200.12.6:55058.service. Oct 2 19:53:22.365165 sshd[1609]: Accepted publickey for core from 10.200.12.6 port 55058 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:22.366720 sshd[1609]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:22.371615 systemd[1]: Started session-4.scope. Oct 2 19:53:22.372218 systemd-logind[1317]: New session 4 of user core. Oct 2 19:53:22.813829 sshd[1609]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:22.816904 systemd-logind[1317]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:53:22.817135 systemd[1]: sshd@1-10.200.8.19:22-10.200.12.6:55058.service: Deactivated successfully. Oct 2 19:53:22.818126 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:53:22.818894 systemd-logind[1317]: Removed session 4. Oct 2 19:53:22.919545 systemd[1]: Started sshd@2-10.200.8.19:22-10.200.12.6:55064.service. Oct 2 19:53:23.572351 sshd[1615]: Accepted publickey for core from 10.200.12.6 port 55064 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:23.574080 sshd[1615]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:23.579956 systemd[1]: Started session-5.scope. Oct 2 19:53:23.580719 systemd-logind[1317]: New session 5 of user core. Oct 2 19:53:24.014818 sshd[1615]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:24.018539 systemd[1]: sshd@2-10.200.8.19:22-10.200.12.6:55064.service: Deactivated successfully. Oct 2 19:53:24.019614 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:53:24.020368 systemd-logind[1317]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:53:24.021305 systemd-logind[1317]: Removed session 5. Oct 2 19:53:24.119511 systemd[1]: Started sshd@3-10.200.8.19:22-10.200.12.6:55078.service. Oct 2 19:53:24.748197 sshd[1621]: Accepted publickey for core from 10.200.12.6 port 55078 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:24.749882 sshd[1621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:24.754818 systemd[1]: Started session-6.scope. Oct 2 19:53:24.755409 systemd-logind[1317]: New session 6 of user core. Oct 2 19:53:25.314177 sshd[1621]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:25.317665 systemd[1]: sshd@3-10.200.8.19:22-10.200.12.6:55078.service: Deactivated successfully. Oct 2 19:53:25.318737 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:53:25.319518 systemd-logind[1317]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:53:25.320471 systemd-logind[1317]: Removed session 6. Oct 2 19:53:25.445555 systemd[1]: Started sshd@4-10.200.8.19:22-10.200.12.6:55092.service. Oct 2 19:53:26.105403 sshd[1627]: Accepted publickey for core from 10.200.12.6 port 55092 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:26.107131 sshd[1627]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:26.112628 systemd[1]: Started session-7.scope. Oct 2 19:53:26.113231 systemd-logind[1317]: New session 7 of user core. Oct 2 19:53:26.687841 sudo[1630]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:53:26.688123 sudo[1630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:26.706841 dbus-daemon[1306]: \xd0\u000dh+\xd4U: received setenforce notice (enforcing=-1171482448) Oct 2 19:53:26.708993 sudo[1630]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:26.821266 sshd[1627]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:26.825173 systemd[1]: sshd@4-10.200.8.19:22-10.200.12.6:55092.service: Deactivated successfully. Oct 2 19:53:26.826240 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:53:26.826944 systemd-logind[1317]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:53:26.827909 systemd-logind[1317]: Removed session 7. Oct 2 19:53:26.925074 systemd[1]: Started sshd@5-10.200.8.19:22-10.200.12.6:55106.service. Oct 2 19:53:27.891332 sshd[1634]: Accepted publickey for core from 10.200.12.6 port 55106 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:27.893023 sshd[1634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:27.897956 systemd[1]: Started session-8.scope. Oct 2 19:53:27.898676 systemd-logind[1317]: New session 8 of user core. Oct 2 19:53:28.232920 sudo[1638]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:53:28.233191 sudo[1638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:28.236242 sudo[1638]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:28.240958 sudo[1637]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:53:28.241222 sudo[1637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:28.250207 systemd[1]: Stopping audit-rules.service... Oct 2 19:53:28.249000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:53:28.254740 auditctl[1641]: No rules Oct 2 19:53:28.254942 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:53:28.254981 kernel: audit: type=1305 audit(1696276408.249:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:53:28.255296 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:53:28.255458 systemd[1]: Stopped audit-rules.service. Oct 2 19:53:28.262781 kernel: audit: type=1300 audit(1696276408.249:163): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffb0bc50f0 a2=420 a3=0 items=0 ppid=1 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:28.249000 audit[1641]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffb0bc50f0 a2=420 a3=0 items=0 ppid=1 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:28.263506 systemd[1]: Starting audit-rules.service... Oct 2 19:53:28.249000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:53:28.281745 kernel: audit: type=1327 audit(1696276408.249:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:53:28.289616 kernel: audit: type=1131 audit(1696276408.253:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.287312 sudo[1637]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:28.289831 augenrules[1658]: No rules Oct 2 19:53:28.286271 systemd[1]: Finished audit-rules.service. Oct 2 19:53:28.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.303899 kernel: audit: type=1130 audit(1696276408.280:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.303963 kernel: audit: type=1106 audit(1696276408.285:166): pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.285000 audit[1637]: USER_END pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.285000 audit[1637]: CRED_DISP pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.327604 kernel: audit: type=1104 audit(1696276408.285:167): pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.387334 sshd[1634]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:28.387000 audit[1634]: USER_END pid=1634 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.391200 systemd[1]: sshd@5-10.200.8.19:22-10.200.12.6:55106.service: Deactivated successfully. Oct 2 19:53:28.391971 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:53:28.393076 systemd-logind[1317]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:53:28.393971 systemd-logind[1317]: Removed session 8. Oct 2 19:53:28.387000 audit[1634]: CRED_DISP pid=1634 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.405608 kernel: audit: type=1106 audit(1696276408.387:168): pid=1634 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.405648 kernel: audit: type=1104 audit(1696276408.387:169): pid=1634 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.19:22-10.200.12.6:55106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.429561 kernel: audit: type=1131 audit(1696276408.389:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.19:22-10.200.12.6:55106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.19:22-10.200.12.6:39424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.493351 systemd[1]: Started sshd@6-10.200.8.19:22-10.200.12.6:39424.service. Oct 2 19:53:29.111000 audit[1664]: USER_ACCT pid=1664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:29.113234 sshd[1664]: Accepted publickey for core from 10.200.12.6 port 39424 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:29.112000 audit[1664]: CRED_ACQ pid=1664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:29.112000 audit[1664]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf8dc0310 a2=3 a3=0 items=0 ppid=1 pid=1664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:29.112000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:53:29.114994 sshd[1664]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:29.119912 systemd[1]: Started session-9.scope. Oct 2 19:53:29.120359 systemd-logind[1317]: New session 9 of user core. Oct 2 19:53:29.123000 audit[1664]: USER_START pid=1664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:29.124000 audit[1666]: CRED_ACQ pid=1666 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:29.454000 audit[1667]: USER_ACCT pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:29.454000 audit[1667]: CRED_REFR pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:29.455736 sudo[1667]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:53:29.456024 sudo[1667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:29.456000 audit[1667]: USER_START pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:30.270500 systemd[1]: Starting docker.service... Oct 2 19:53:30.314242 env[1682]: time="2023-10-02T19:53:30.314178045Z" level=info msg="Starting up" Oct 2 19:53:30.315641 env[1682]: time="2023-10-02T19:53:30.315610151Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:53:30.315641 env[1682]: time="2023-10-02T19:53:30.315635551Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:53:30.315813 env[1682]: time="2023-10-02T19:53:30.315668851Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:53:30.315813 env[1682]: time="2023-10-02T19:53:30.315684551Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:53:30.317886 env[1682]: time="2023-10-02T19:53:30.317857460Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:53:30.317886 env[1682]: time="2023-10-02T19:53:30.317881361Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:53:30.318020 env[1682]: time="2023-10-02T19:53:30.317900061Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:53:30.318020 env[1682]: time="2023-10-02T19:53:30.317911461Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:53:30.324091 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport558922951-merged.mount: Deactivated successfully. Oct 2 19:53:30.429087 env[1682]: time="2023-10-02T19:53:30.429038925Z" level=info msg="Loading containers: start." Oct 2 19:53:30.461000 audit[1710]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.461000 audit[1710]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc5921eeb0 a2=0 a3=7ffc5921ee9c items=0 ppid=1682 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.461000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:53:30.463000 audit[1712]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.463000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff464a2bc0 a2=0 a3=7fff464a2bac items=0 ppid=1682 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.463000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:53:30.465000 audit[1714]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.465000 audit[1714]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd1d6face0 a2=0 a3=7ffd1d6faccc items=0 ppid=1682 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.465000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:53:30.467000 audit[1716]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.467000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffeedf29180 a2=0 a3=7ffeedf2916c items=0 ppid=1682 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.467000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:53:30.468000 audit[1718]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.468000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb18223b0 a2=0 a3=7fffb182239c items=0 ppid=1682 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:53:30.470000 audit[1720]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.470000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda4494b80 a2=0 a3=7ffda4494b6c items=0 ppid=1682 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.470000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:53:30.489000 audit[1722]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.489000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcd6300f20 a2=0 a3=7ffcd6300f0c items=0 ppid=1682 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.489000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:53:30.491000 audit[1724]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.491000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd9066b3b0 a2=0 a3=7ffd9066b39c items=0 ppid=1682 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.491000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:53:30.493000 audit[1726]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.493000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc64be8780 a2=0 a3=7ffc64be876c items=0 ppid=1682 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.493000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.511000 audit[1730]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.511000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffeaac214b0 a2=0 a3=7ffeaac2149c items=0 ppid=1682 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.511000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.512000 audit[1731]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.512000 audit[1731]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff68115880 a2=0 a3=7fff6811586c items=0 ppid=1682 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.512000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.547611 kernel: Initializing XFRM netlink socket Oct 2 19:53:30.577166 env[1682]: time="2023-10-02T19:53:30.577127343Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:53:30.628000 audit[1739]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.628000 audit[1739]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd3044e4b0 a2=0 a3=7ffd3044e49c items=0 ppid=1682 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:53:30.651000 audit[1742]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.651000 audit[1742]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffeb00d0050 a2=0 a3=7ffeb00d003c items=0 ppid=1682 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.651000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:53:30.654000 audit[1745]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.654000 audit[1745]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe8cee5db0 a2=0 a3=7ffe8cee5d9c items=0 ppid=1682 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.654000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:53:30.656000 audit[1747]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.656000 audit[1747]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffedecf74f0 a2=0 a3=7ffedecf74dc items=0 ppid=1682 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.656000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:53:30.658000 audit[1749]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1749 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.658000 audit[1749]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe17618400 a2=0 a3=7ffe176183ec items=0 ppid=1682 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.658000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:53:30.660000 audit[1751]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.660000 audit[1751]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe5cf45b50 a2=0 a3=7ffe5cf45b3c items=0 ppid=1682 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:53:30.662000 audit[1753]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1753 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.662000 audit[1753]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdd18efe90 a2=0 a3=7ffdd18efe7c items=0 ppid=1682 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:53:30.664000 audit[1755]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.664000 audit[1755]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffeedb51580 a2=0 a3=7ffeedb5156c items=0 ppid=1682 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:53:30.666000 audit[1757]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.666000 audit[1757]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe7f650d10 a2=0 a3=7ffe7f650cfc items=0 ppid=1682 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:53:30.668000 audit[1759]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.668000 audit[1759]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff987619f0 a2=0 a3=7fff987619dc items=0 ppid=1682 pid=1759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.668000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:53:30.670000 audit[1761]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.670000 audit[1761]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffe947ed50 a2=0 a3=7fffe947ed3c items=0 ppid=1682 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.670000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:53:30.672278 systemd-networkd[1473]: docker0: Link UP Oct 2 19:53:30.688000 audit[1765]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.688000 audit[1765]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd3be81810 a2=0 a3=7ffd3be817fc items=0 ppid=1682 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.688000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.690000 audit[1766]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.690000 audit[1766]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc5785bf10 a2=0 a3=7ffc5785befc items=0 ppid=1682 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.690000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.692107 env[1682]: time="2023-10-02T19:53:30.692074823Z" level=info msg="Loading containers: done." Oct 2 19:53:30.708204 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2150381805-merged.mount: Deactivated successfully. Oct 2 19:53:30.754556 env[1682]: time="2023-10-02T19:53:30.754498084Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:53:30.754872 env[1682]: time="2023-10-02T19:53:30.754842585Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:53:30.755032 env[1682]: time="2023-10-02T19:53:30.755007386Z" level=info msg="Daemon has completed initialization" Oct 2 19:53:30.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:30.786514 systemd[1]: Started docker.service. Oct 2 19:53:30.791071 env[1682]: time="2023-10-02T19:53:30.791024736Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:53:30.813139 systemd[1]: Reloading. Oct 2 19:53:30.886773 /usr/lib/systemd/system-generators/torcx-generator[1813]: time="2023-10-02T19:53:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:30.886812 /usr/lib/systemd/system-generators/torcx-generator[1813]: time="2023-10-02T19:53:30Z" level=info msg="torcx already run" Oct 2 19:53:30.979886 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:30.979906 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:30.995994 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit: BPF prog-id=32 op=LOAD Oct 2 19:53:31.066000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.067000 audit: BPF prog-id=33 op=LOAD Oct 2 19:53:31.067000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit: BPF prog-id=34 op=LOAD Oct 2 19:53:31.068000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit: BPF prog-id=35 op=LOAD Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.068000 audit: BPF prog-id=36 op=LOAD Oct 2 19:53:31.068000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:53:31.068000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.070000 audit: BPF prog-id=37 op=LOAD Oct 2 19:53:31.070000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.071000 audit: BPF prog-id=38 op=LOAD Oct 2 19:53:31.071000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit: BPF prog-id=39 op=LOAD Oct 2 19:53:31.073000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit: BPF prog-id=40 op=LOAD Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.073000 audit: BPF prog-id=41 op=LOAD Oct 2 19:53:31.073000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:53:31.073000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit: BPF prog-id=42 op=LOAD Oct 2 19:53:31.076000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit: BPF prog-id=43 op=LOAD Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.076000 audit: BPF prog-id=44 op=LOAD Oct 2 19:53:31.076000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:53:31.076000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit: BPF prog-id=45 op=LOAD Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.077000 audit: BPF prog-id=46 op=LOAD Oct 2 19:53:31.077000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:53:31.077000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:53:31.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:31.089236 systemd[1]: Started kubelet.service. Oct 2 19:53:31.164756 kubelet[1874]: E1002 19:53:31.164691 1874 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:53:31.166527 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:31.166706 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:31.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:33.812138 env[1336]: time="2023-10-02T19:53:33.812077838Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:53:34.564994 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3370918408.mount: Deactivated successfully. Oct 2 19:53:36.484676 env[1336]: time="2023-10-02T19:53:36.484613969Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:36.493185 env[1336]: time="2023-10-02T19:53:36.493138300Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:36.500035 env[1336]: time="2023-10-02T19:53:36.499994525Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:36.504867 env[1336]: time="2023-10-02T19:53:36.504832842Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:36.505464 env[1336]: time="2023-10-02T19:53:36.505427444Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce\"" Oct 2 19:53:36.515810 env[1336]: time="2023-10-02T19:53:36.515778882Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:53:38.501262 env[1336]: time="2023-10-02T19:53:38.501191554Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:38.509553 env[1336]: time="2023-10-02T19:53:38.509499583Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:38.514318 env[1336]: time="2023-10-02T19:53:38.514268900Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:38.518861 env[1336]: time="2023-10-02T19:53:38.518816216Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:38.519459 env[1336]: time="2023-10-02T19:53:38.519424118Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57\"" Oct 2 19:53:38.530296 env[1336]: time="2023-10-02T19:53:38.530255856Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:53:39.782110 env[1336]: time="2023-10-02T19:53:39.782050660Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:39.789243 env[1336]: time="2023-10-02T19:53:39.789196484Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:39.795166 env[1336]: time="2023-10-02T19:53:39.795130804Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:39.799112 env[1336]: time="2023-10-02T19:53:39.799076918Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:39.799713 env[1336]: time="2023-10-02T19:53:39.799680220Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8\"" Oct 2 19:53:39.809890 env[1336]: time="2023-10-02T19:53:39.809862555Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:53:40.772850 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3261437350.mount: Deactivated successfully. Oct 2 19:53:41.306479 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 19:53:41.306626 kernel: audit: type=1130 audit(1696276421.285:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.286847 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:53:41.287117 systemd[1]: Stopped kubelet.service. Oct 2 19:53:41.305990 systemd[1]: Started kubelet.service. Oct 2 19:53:41.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.322648 kernel: audit: type=1131 audit(1696276421.285:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.336814 kernel: audit: type=1130 audit(1696276421.304:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.361133 env[1336]: time="2023-10-02T19:53:41.361077421Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.366884 env[1336]: time="2023-10-02T19:53:41.366291138Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.370508 env[1336]: time="2023-10-02T19:53:41.370291652Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.373355 env[1336]: time="2023-10-02T19:53:41.373304161Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.374260 env[1336]: time="2023-10-02T19:53:41.373785263Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0\"" Oct 2 19:53:41.386490 kubelet[1907]: E1002 19:53:41.386439 1907 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:53:41.391052 env[1336]: time="2023-10-02T19:53:41.391023719Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:53:41.391481 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:41.391667 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:41.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:41.406609 kernel: audit: type=1131 audit(1696276421.390:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:41.881835 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount923417494.mount: Deactivated successfully. Oct 2 19:53:41.908522 env[1336]: time="2023-10-02T19:53:41.908468310Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.914795 env[1336]: time="2023-10-02T19:53:41.914753931Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.918832 env[1336]: time="2023-10-02T19:53:41.918802444Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.922991 env[1336]: time="2023-10-02T19:53:41.922959058Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:41.923390 env[1336]: time="2023-10-02T19:53:41.923358159Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:53:41.933371 env[1336]: time="2023-10-02T19:53:41.933340992Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:53:46.780509 env[1336]: time="2023-10-02T19:53:46.780440226Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:46.787868 env[1336]: time="2023-10-02T19:53:46.787821348Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:46.792756 env[1336]: time="2023-10-02T19:53:46.792717563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:46.799705 env[1336]: time="2023-10-02T19:53:46.799670583Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:46.800406 env[1336]: time="2023-10-02T19:53:46.800371785Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 19:53:46.811829 env[1336]: time="2023-10-02T19:53:46.811797419Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:53:47.417529 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3932784775.mount: Deactivated successfully. Oct 2 19:53:48.084448 env[1336]: time="2023-10-02T19:53:48.084391005Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:48.093876 env[1336]: time="2023-10-02T19:53:48.093831932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:48.098849 env[1336]: time="2023-10-02T19:53:48.098810946Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:48.102824 env[1336]: time="2023-10-02T19:53:48.102784857Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:48.103264 env[1336]: time="2023-10-02T19:53:48.103228358Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:53:50.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.292361 systemd[1]: Stopped kubelet.service. Oct 2 19:53:50.307629 kernel: audit: type=1130 audit(1696276430.290:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.315080 systemd[1]: Reloading. Oct 2 19:53:50.324612 kernel: audit: type=1131 audit(1696276430.291:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.388320 /usr/lib/systemd/system-generators/torcx-generator[2012]: time="2023-10-02T19:53:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:50.394179 /usr/lib/systemd/system-generators/torcx-generator[2012]: time="2023-10-02T19:53:50Z" level=info msg="torcx already run" Oct 2 19:53:50.484203 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:50.484223 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:50.500475 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:50.583682 kernel: audit: type=1400 audit(1696276430.568:385): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.617830 kernel: audit: type=1400 audit(1696276430.568:386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.617933 kernel: audit: audit_backlog=64 > audit_backlog_limit=64 Oct 2 19:53:50.617959 kernel: audit: type=1400 audit(1696276430.568:387): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.617982 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.639482 kernel: audit: type=1400 audit(1696276430.568:388): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.639619 kernel: audit: backlog limit exceeded Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653648 kernel: audit: type=1400 audit(1696276430.568:389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.581000 audit: BPF prog-id=47 op=LOAD Oct 2 19:53:50.581000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.582000 audit: BPF prog-id=48 op=LOAD Oct 2 19:53:50.582000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit: BPF prog-id=49 op=LOAD Oct 2 19:53:50.584000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit: BPF prog-id=50 op=LOAD Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.584000 audit: BPF prog-id=51 op=LOAD Oct 2 19:53:50.584000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:53:50.584000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.621000 audit: BPF prog-id=52 op=LOAD Oct 2 19:53:50.637000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:53:50.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.653000 audit: BPF prog-id=54 op=LOAD Oct 2 19:53:50.654000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit: BPF prog-id=55 op=LOAD Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.654000 audit: BPF prog-id=56 op=LOAD Oct 2 19:53:50.654000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:53:50.654000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit: BPF prog-id=57 op=LOAD Oct 2 19:53:50.657000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit: BPF prog-id=58 op=LOAD Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.657000 audit: BPF prog-id=59 op=LOAD Oct 2 19:53:50.657000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:53:50.657000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit: BPF prog-id=60 op=LOAD Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.658000 audit: BPF prog-id=61 op=LOAD Oct 2 19:53:50.658000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:53:50.658000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:53:50.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.676930 systemd[1]: Started kubelet.service. Oct 2 19:53:50.724154 kubelet[2074]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:50.724524 kubelet[2074]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:53:50.724565 kubelet[2074]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:50.724723 kubelet[2074]: I1002 19:53:50.724684 2074 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:53:50.952196 kubelet[2074]: I1002 19:53:50.947540 2074 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:53:50.952196 kubelet[2074]: I1002 19:53:50.947568 2074 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:53:50.952196 kubelet[2074]: I1002 19:53:50.947853 2074 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:53:50.954261 kubelet[2074]: I1002 19:53:50.954229 2074 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:53:50.954400 kubelet[2074]: E1002 19:53:50.954386 2074 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.19:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:50.959986 kubelet[2074]: I1002 19:53:50.959962 2074 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:53:50.960219 kubelet[2074]: I1002 19:53:50.960192 2074 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:53:50.960401 kubelet[2074]: I1002 19:53:50.960384 2074 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:53:50.960549 kubelet[2074]: I1002 19:53:50.960414 2074 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:53:50.960549 kubelet[2074]: I1002 19:53:50.960427 2074 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:53:50.960666 kubelet[2074]: I1002 19:53:50.960561 2074 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:50.960735 kubelet[2074]: I1002 19:53:50.960717 2074 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:53:50.961042 kubelet[2074]: I1002 19:53:50.960740 2074 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:53:50.961128 kubelet[2074]: I1002 19:53:50.961071 2074 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:53:50.961128 kubelet[2074]: I1002 19:53:50.961091 2074 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:53:50.961649 kubelet[2074]: W1002 19:53:50.961297 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74431cd9b5&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:50.961790 kubelet[2074]: E1002 19:53:50.961780 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74431cd9b5&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:50.961942 kubelet[2074]: I1002 19:53:50.961931 2074 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:53:50.962349 kubelet[2074]: W1002 19:53:50.962330 2074 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:53:50.963048 kubelet[2074]: I1002 19:53:50.963030 2074 server.go:1232] "Started kubelet" Oct 2 19:53:50.963000 audit[2074]: AVC avc: denied { mac_admin } for pid=2074 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.963000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:50.963000 audit[2074]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000733560 a1=c000b3c5d0 a2=c000733530 a3=25 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:50.963000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:50.965152 kubelet[2074]: I1002 19:53:50.965140 2074 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:53:50.963000 audit[2074]: AVC avc: denied { mac_admin } for pid=2074 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:50.963000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:50.963000 audit[2074]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b1c3e0 a1=c000b3c5e8 a2=c0007335f0 a3=25 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:50.963000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:50.965508 kubelet[2074]: I1002 19:53:50.965496 2074 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:53:50.965683 kubelet[2074]: I1002 19:53:50.965669 2074 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:53:50.967548 kubelet[2074]: W1002 19:53:50.966966 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:50.967548 kubelet[2074]: E1002 19:53:50.967014 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:50.968936 kubelet[2074]: I1002 19:53:50.968911 2074 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:53:50.969500 kubelet[2074]: I1002 19:53:50.969476 2074 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:53:50.970904 kubelet[2074]: I1002 19:53:50.970878 2074 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:53:50.971084 kubelet[2074]: I1002 19:53:50.971066 2074 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:53:50.971661 kubelet[2074]: E1002 19:53:50.971641 2074 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:53:50.971739 kubelet[2074]: E1002 19:53:50.971672 2074 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:53:50.973019 kubelet[2074]: E1002 19:53:50.971927 2074 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-74431cd9b5.178a626d3c6adfb2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-74431cd9b5", UID:"ci-3510.3.0-a-74431cd9b5", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-74431cd9b5"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 50, 963007410, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 50, 963007410, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-74431cd9b5"}': 'Post "https://10.200.8.19:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.19:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:53:50.973019 kubelet[2074]: I1002 19:53:50.972053 2074 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:53:50.973019 kubelet[2074]: I1002 19:53:50.972140 2074 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:53:50.973019 kubelet[2074]: I1002 19:53:50.972195 2074 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:53:50.973019 kubelet[2074]: W1002 19:53:50.972496 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:50.973336 kubelet[2074]: E1002 19:53:50.972539 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:50.973336 kubelet[2074]: E1002 19:53:50.972974 2074 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74431cd9b5?timeout=10s\": dial tcp 10.200.8.19:6443: connect: connection refused" interval="200ms" Oct 2 19:53:50.973000 audit[2084]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:50.973000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe3d82e8f0 a2=0 a3=7ffe3d82e8dc items=0 ppid=2074 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:50.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:53:50.975000 audit[2085]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:50.975000 audit[2085]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff0635490 a2=0 a3=7ffff063547c items=0 ppid=2074 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:50.975000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:53:50.981000 audit[2087]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:50.981000 audit[2087]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe270ddb60 a2=0 a3=7ffe270ddb4c items=0 ppid=2074 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:50.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:53:50.986000 audit[2089]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:50.986000 audit[2089]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffc3df0c10 a2=0 a3=7fffc3df0bfc items=0 ppid=2074 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:50.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:53:51.010000 audit[2094]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:51.010000 audit[2094]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc5f82ac10 a2=0 a3=7ffc5f82abfc items=0 ppid=2074 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:53:51.013009 kubelet[2074]: I1002 19:53:51.012974 2074 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:53:51.012000 audit[2097]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:51.012000 audit[2097]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc5e174ff0 a2=0 a3=7ffc5e174fdc items=0 ppid=2074 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.012000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:53:51.014959 kubelet[2074]: I1002 19:53:51.014937 2074 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:53:51.015051 kubelet[2074]: I1002 19:53:51.014974 2074 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:53:51.015051 kubelet[2074]: I1002 19:53:51.014997 2074 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:53:51.015051 kubelet[2074]: E1002 19:53:51.015048 2074 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:53:51.016214 kubelet[2074]: W1002 19:53:51.016151 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:51.016369 kubelet[2074]: E1002 19:53:51.016356 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:51.014000 audit[2098]: NETFILTER_CFG table=mangle:36 family=2 entries=1 op=nft_register_chain pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:51.014000 audit[2098]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6b69e940 a2=0 a3=7ffd6b69e92c items=0 ppid=2074 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.014000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:53:51.016000 audit[2099]: NETFILTER_CFG table=mangle:37 family=10 entries=1 op=nft_register_chain pid=2099 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:51.017000 audit[2100]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:51.017000 audit[2100]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee2a52ab0 a2=0 a3=7ffee2a52a9c items=0 ppid=2074 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:53:51.016000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc429c040 a2=0 a3=7fffc429c02c items=0 ppid=2074 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.016000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:53:51.018000 audit[2103]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_chain pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:51.018000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc1bbe27f0 a2=0 a3=7ffc1bbe27dc items=0 ppid=2074 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.018000 audit[2104]: NETFILTER_CFG table=nat:40 family=10 entries=2 op=nft_register_chain pid=2104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:51.018000 audit[2104]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff65b75420 a2=0 a3=7fff65b7540c items=0 ppid=2074 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.018000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:53:51.018000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:53:51.019000 audit[2105]: NETFILTER_CFG table=filter:41 family=10 entries=2 op=nft_register_chain pid=2105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:51.019000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc6f088840 a2=0 a3=7ffc6f08882c items=0 ppid=2074 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:53:51.055949 kubelet[2074]: I1002 19:53:51.055923 2074 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:53:51.056319 kubelet[2074]: I1002 19:53:51.056305 2074 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:53:51.056416 kubelet[2074]: I1002 19:53:51.056409 2074 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:51.061996 kubelet[2074]: I1002 19:53:51.061972 2074 policy_none.go:49] "None policy: Start" Oct 2 19:53:51.062823 kubelet[2074]: I1002 19:53:51.062797 2074 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:53:51.062823 kubelet[2074]: I1002 19:53:51.062823 2074 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:53:51.070772 systemd[1]: Created slice kubepods.slice. Oct 2 19:53:51.074001 kubelet[2074]: I1002 19:53:51.073981 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.074679 kubelet[2074]: E1002 19:53:51.074663 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.076623 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:53:51.083582 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:53:51.085468 kubelet[2074]: I1002 19:53:51.085450 2074 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:53:51.084000 audit[2074]: AVC avc: denied { mac_admin } for pid=2074 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:51.084000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:51.084000 audit[2074]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00084ec90 a1=c000bc9fc8 a2=c00084ec60 a3=25 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.084000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:51.087050 kubelet[2074]: I1002 19:53:51.087032 2074 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:53:51.087265 kubelet[2074]: I1002 19:53:51.087248 2074 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:53:51.087937 kubelet[2074]: E1002 19:53:51.087923 2074 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-74431cd9b5\" not found" Oct 2 19:53:51.116134 kubelet[2074]: I1002 19:53:51.116099 2074 topology_manager.go:215] "Topology Admit Handler" podUID="9f488878691ca48a7b8d409e41015ae3" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.118046 kubelet[2074]: I1002 19:53:51.118011 2074 topology_manager.go:215] "Topology Admit Handler" podUID="5642080e4c1fe57851780e7074ce3fb6" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.119531 kubelet[2074]: I1002 19:53:51.119503 2074 topology_manager.go:215] "Topology Admit Handler" podUID="c8b3191be97163cc7c509528a955b7a0" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.125802 systemd[1]: Created slice kubepods-burstable-pod9f488878691ca48a7b8d409e41015ae3.slice. Oct 2 19:53:51.135389 systemd[1]: Created slice kubepods-burstable-pod5642080e4c1fe57851780e7074ce3fb6.slice. Oct 2 19:53:51.140214 systemd[1]: Created slice kubepods-burstable-podc8b3191be97163cc7c509528a955b7a0.slice. Oct 2 19:53:51.173612 kubelet[2074]: E1002 19:53:51.173561 2074 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74431cd9b5?timeout=10s\": dial tcp 10.200.8.19:6443: connect: connection refused" interval="400ms" Oct 2 19:53:51.274315 kubelet[2074]: I1002 19:53:51.274160 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9f488878691ca48a7b8d409e41015ae3-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74431cd9b5\" (UID: \"9f488878691ca48a7b8d409e41015ae3\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.274658 kubelet[2074]: I1002 19:53:51.274631 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9f488878691ca48a7b8d409e41015ae3-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-74431cd9b5\" (UID: \"9f488878691ca48a7b8d409e41015ae3\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.276287 kubelet[2074]: I1002 19:53:51.276261 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.276470 kubelet[2074]: I1002 19:53:51.276458 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.276582 kubelet[2074]: I1002 19:53:51.276571 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.276709 kubelet[2074]: I1002 19:53:51.276690 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9f488878691ca48a7b8d409e41015ae3-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74431cd9b5\" (UID: \"9f488878691ca48a7b8d409e41015ae3\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.276825 kubelet[2074]: I1002 19:53:51.276815 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.276916 kubelet[2074]: I1002 19:53:51.276907 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.277017 kubelet[2074]: I1002 19:53:51.277009 2074 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c8b3191be97163cc7c509528a955b7a0-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-74431cd9b5\" (UID: \"c8b3191be97163cc7c509528a955b7a0\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.277875 kubelet[2074]: I1002 19:53:51.277859 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.278558 kubelet[2074]: E1002 19:53:51.278542 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.434547 env[1336]: time="2023-10-02T19:53:51.434483574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-74431cd9b5,Uid:9f488878691ca48a7b8d409e41015ae3,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:51.439177 env[1336]: time="2023-10-02T19:53:51.439059387Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-74431cd9b5,Uid:5642080e4c1fe57851780e7074ce3fb6,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:51.442989 env[1336]: time="2023-10-02T19:53:51.442605396Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-74431cd9b5,Uid:c8b3191be97163cc7c509528a955b7a0,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:51.574665 kubelet[2074]: E1002 19:53:51.574626 2074 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74431cd9b5?timeout=10s\": dial tcp 10.200.8.19:6443: connect: connection refused" interval="800ms" Oct 2 19:53:51.680605 kubelet[2074]: I1002 19:53:51.680555 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.680981 kubelet[2074]: E1002 19:53:51.680960 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:51.911070 kubelet[2074]: W1002 19:53:51.910901 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:51.911070 kubelet[2074]: E1002 19:53:51.910972 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:51.957519 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount322728263.mount: Deactivated successfully. Oct 2 19:53:51.992647 env[1336]: time="2023-10-02T19:53:51.992573469Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:51.997750 env[1336]: time="2023-10-02T19:53:51.997692182Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.009278 env[1336]: time="2023-10-02T19:53:52.009241313Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.017615 env[1336]: time="2023-10-02T19:53:52.017540435Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.025866 env[1336]: time="2023-10-02T19:53:52.025833556Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.028022 env[1336]: time="2023-10-02T19:53:52.027986362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.031751 env[1336]: time="2023-10-02T19:53:52.031718272Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.036202 env[1336]: time="2023-10-02T19:53:52.036159884Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.038866 env[1336]: time="2023-10-02T19:53:52.038838591Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.046165 env[1336]: time="2023-10-02T19:53:52.046124710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.051315 env[1336]: time="2023-10-02T19:53:52.051278623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.062603 env[1336]: time="2023-10-02T19:53:52.062528053Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:52.120083 env[1336]: time="2023-10-02T19:53:52.116131594Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:52.120083 env[1336]: time="2023-10-02T19:53:52.116165594Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:52.120083 env[1336]: time="2023-10-02T19:53:52.116178494Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:52.120083 env[1336]: time="2023-10-02T19:53:52.116328194Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666 pid=2115 runtime=io.containerd.runc.v2 Oct 2 19:53:52.144638 systemd[1]: Started cri-containerd-274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666.scope. Oct 2 19:53:52.168483 env[1336]: time="2023-10-02T19:53:52.167174928Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:52.168483 env[1336]: time="2023-10-02T19:53:52.167283728Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:52.168483 env[1336]: time="2023-10-02T19:53:52.167311528Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:52.168483 env[1336]: time="2023-10-02T19:53:52.167474729Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a08311dd3fc19246badbf97edb7f5beab822bdbd593be0f2386fec5df42f8dc3 pid=2156 runtime=io.containerd.runc.v2 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit: BPF prog-id=62 op=LOAD Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2115 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237346464636263613363623561633730643737646666336135343232 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2115 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237346464636263613363623561633730643737646666336135343232 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit: BPF prog-id=63 op=LOAD Oct 2 19:53:52.173000 audit[2125]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001deec0 items=0 ppid=2115 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237346464636263613363623561633730643737646666336135343232 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.173000 audit: BPF prog-id=64 op=LOAD Oct 2 19:53:52.173000 audit[2125]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001def08 items=0 ppid=2115 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237346464636263613363623561633730643737646666336135343232 Oct 2 19:53:52.173000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:53:52.173000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { perfmon } for pid=2125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit[2125]: AVC avc: denied { bpf } for pid=2125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.174000 audit: BPF prog-id=65 op=LOAD Oct 2 19:53:52.174000 audit[2125]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001df318 items=0 ppid=2115 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237346464636263613363623561633730643737646666336135343232 Oct 2 19:53:52.185845 env[1336]: time="2023-10-02T19:53:52.185757277Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:52.185845 env[1336]: time="2023-10-02T19:53:52.185803977Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:52.186101 env[1336]: time="2023-10-02T19:53:52.185818877Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:52.186101 env[1336]: time="2023-10-02T19:53:52.185995377Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7124e891c881aab3c95e6dfe447b8f81428902376c236cf29f2c9f211b16704f pid=2164 runtime=io.containerd.runc.v2 Oct 2 19:53:52.201235 systemd[1]: Started cri-containerd-a08311dd3fc19246badbf97edb7f5beab822bdbd593be0f2386fec5df42f8dc3.scope. Oct 2 19:53:52.207352 systemd[1]: Started cri-containerd-7124e891c881aab3c95e6dfe447b8f81428902376c236cf29f2c9f211b16704f.scope. Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.220000 audit: BPF prog-id=66 op=LOAD Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2164 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731323465383931633838316161623363393565366466653434376238 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2164 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731323465383931633838316161623363393565366466653434376238 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit: BPF prog-id=67 op=LOAD Oct 2 19:53:52.221000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388340 items=0 ppid=2164 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731323465383931633838316161623363393565366466653434376238 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit: BPF prog-id=68 op=LOAD Oct 2 19:53:52.221000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000388388 items=0 ppid=2164 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731323465383931633838316161623363393565366466653434376238 Oct 2 19:53:52.221000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:53:52.221000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.221000 audit: BPF prog-id=69 op=LOAD Oct 2 19:53:52.221000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000388798 items=0 ppid=2164 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731323465383931633838316161623363393565366466653434376238 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.236000 audit: BPF prog-id=70 op=LOAD Oct 2 19:53:52.237000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.237000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2156 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130383331316464336663313932343662616462663937656462376635 Oct 2 19:53:52.237000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.237000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2156 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130383331316464336663313932343662616462663937656462376635 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.238000 audit: BPF prog-id=71 op=LOAD Oct 2 19:53:52.238000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00039cbf0 items=0 ppid=2156 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130383331316464336663313932343662616462663937656462376635 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit: BPF prog-id=72 op=LOAD Oct 2 19:53:52.239000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00039cc38 items=0 ppid=2156 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130383331316464336663313932343662616462663937656462376635 Oct 2 19:53:52.239000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:53:52.239000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.239000 audit: BPF prog-id=73 op=LOAD Oct 2 19:53:52.239000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00039d048 items=0 ppid=2156 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130383331316464336663313932343662616462663937656462376635 Oct 2 19:53:52.247108 kubelet[2074]: W1002 19:53:52.247054 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:52.247108 kubelet[2074]: E1002 19:53:52.247107 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:52.262106 env[1336]: time="2023-10-02T19:53:52.262051677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-74431cd9b5,Uid:5642080e4c1fe57851780e7074ce3fb6,Namespace:kube-system,Attempt:0,} returns sandbox id \"274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666\"" Oct 2 19:53:52.268073 env[1336]: time="2023-10-02T19:53:52.268022793Z" level=info msg="CreateContainer within sandbox \"274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:53:52.290328 kubelet[2074]: W1002 19:53:52.290207 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:52.290328 kubelet[2074]: E1002 19:53:52.290286 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:52.291258 env[1336]: time="2023-10-02T19:53:52.291208354Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-74431cd9b5,Uid:9f488878691ca48a7b8d409e41015ae3,Namespace:kube-system,Attempt:0,} returns sandbox id \"a08311dd3fc19246badbf97edb7f5beab822bdbd593be0f2386fec5df42f8dc3\"" Oct 2 19:53:52.297700 env[1336]: time="2023-10-02T19:53:52.297656171Z" level=info msg="CreateContainer within sandbox \"a08311dd3fc19246badbf97edb7f5beab822bdbd593be0f2386fec5df42f8dc3\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:53:52.302524 env[1336]: time="2023-10-02T19:53:52.302484484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-74431cd9b5,Uid:c8b3191be97163cc7c509528a955b7a0,Namespace:kube-system,Attempt:0,} returns sandbox id \"7124e891c881aab3c95e6dfe447b8f81428902376c236cf29f2c9f211b16704f\"" Oct 2 19:53:52.305267 env[1336]: time="2023-10-02T19:53:52.305237891Z" level=info msg="CreateContainer within sandbox \"7124e891c881aab3c95e6dfe447b8f81428902376c236cf29f2c9f211b16704f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:53:52.307910 env[1336]: time="2023-10-02T19:53:52.307871198Z" level=info msg="CreateContainer within sandbox \"274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f\"" Oct 2 19:53:52.308464 env[1336]: time="2023-10-02T19:53:52.308436499Z" level=info msg="StartContainer for \"6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f\"" Oct 2 19:53:52.325945 systemd[1]: Started cri-containerd-6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f.scope. Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit: BPF prog-id=74 op=LOAD Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2115 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363231393063343366353162643536346538393064306662323631 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2115 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363231393063343366353162643536346538393064306662323631 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit: BPF prog-id=75 op=LOAD Oct 2 19:53:52.343000 audit[2243]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000397450 items=0 ppid=2115 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363231393063343366353162643536346538393064306662323631 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.343000 audit: BPF prog-id=76 op=LOAD Oct 2 19:53:52.343000 audit[2243]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000397498 items=0 ppid=2115 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363231393063343366353162643536346538393064306662323631 Oct 2 19:53:52.344000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:53:52.344000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.344000 audit: BPF prog-id=77 op=LOAD Oct 2 19:53:52.344000 audit[2243]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003978a8 items=0 ppid=2115 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363231393063343366353162643536346538393064306662323631 Oct 2 19:53:52.367287 env[1336]: time="2023-10-02T19:53:52.367244754Z" level=info msg="CreateContainer within sandbox \"a08311dd3fc19246badbf97edb7f5beab822bdbd593be0f2386fec5df42f8dc3\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"be6cf95ff2593f3a0c12be7971c21e8623e4db82b414c54a2e5a014ec6bdd46d\"" Oct 2 19:53:52.369528 env[1336]: time="2023-10-02T19:53:52.369491160Z" level=info msg="StartContainer for \"be6cf95ff2593f3a0c12be7971c21e8623e4db82b414c54a2e5a014ec6bdd46d\"" Oct 2 19:53:52.371756 env[1336]: time="2023-10-02T19:53:52.371720865Z" level=info msg="CreateContainer within sandbox \"7124e891c881aab3c95e6dfe447b8f81428902376c236cf29f2c9f211b16704f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05\"" Oct 2 19:53:52.375818 kubelet[2074]: E1002 19:53:52.375794 2074 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74431cd9b5?timeout=10s\": dial tcp 10.200.8.19:6443: connect: connection refused" interval="1.6s" Oct 2 19:53:52.376519 env[1336]: time="2023-10-02T19:53:52.376488578Z" level=info msg="StartContainer for \"08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05\"" Oct 2 19:53:52.395221 env[1336]: time="2023-10-02T19:53:52.395168727Z" level=info msg="StartContainer for \"6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f\" returns successfully" Oct 2 19:53:52.401391 kubelet[2074]: W1002 19:53:52.401274 2074 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74431cd9b5&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:52.401391 kubelet[2074]: E1002 19:53:52.401403 2074 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74431cd9b5&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:53:52.407556 systemd[1]: Started cri-containerd-08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05.scope. Oct 2 19:53:52.419988 systemd[1]: Started cri-containerd-be6cf95ff2593f3a0c12be7971c21e8623e4db82b414c54a2e5a014ec6bdd46d.scope. Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.452000 audit: BPF prog-id=78 op=LOAD Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000119c48 a2=10 a3=1c items=0 ppid=2164 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666533616662343661396462353237643664623936623766366532 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001196b0 a2=3c a3=8 items=0 ppid=2164 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666533616662343661396462353237643664623936623766366532 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit: BPF prog-id=79 op=LOAD Oct 2 19:53:52.454000 audit[2292]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001199d8 a2=78 a3=c00029a630 items=0 ppid=2164 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666533616662343661396462353237643664623936623766366532 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit: BPF prog-id=80 op=LOAD Oct 2 19:53:52.454000 audit[2292]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000119770 a2=78 a3=c00029a678 items=0 ppid=2164 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666533616662343661396462353237643664623936623766366532 Oct 2 19:53:52.454000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:53:52.454000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.454000 audit: BPF prog-id=81 op=LOAD Oct 2 19:53:52.454000 audit[2292]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000119c30 a2=78 a3=c00029aa88 items=0 ppid=2164 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666533616662343661396462353237643664623936623766366532 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.469000 audit: BPF prog-id=82 op=LOAD Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2156 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265366366393566663235393366336130633132626537393731633231 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2156 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265366366393566663235393366336130633132626537393731633231 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit: BPF prog-id=83 op=LOAD Oct 2 19:53:52.470000 audit[2281]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000218a40 items=0 ppid=2156 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265366366393566663235393366336130633132626537393731633231 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit: BPF prog-id=84 op=LOAD Oct 2 19:53:52.470000 audit[2281]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000218a88 items=0 ppid=2156 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265366366393566663235393366336130633132626537393731633231 Oct 2 19:53:52.470000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:53:52.470000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { perfmon } for pid=2281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit[2281]: AVC avc: denied { bpf } for pid=2281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:52.470000 audit: BPF prog-id=85 op=LOAD Oct 2 19:53:52.470000 audit[2281]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000218e98 items=0 ppid=2156 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265366366393566663235393366336130633132626537393731633231 Oct 2 19:53:52.483912 kubelet[2074]: I1002 19:53:52.483304 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:52.483912 kubelet[2074]: E1002 19:53:52.483863 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:52.511519 env[1336]: time="2023-10-02T19:53:52.511467733Z" level=info msg="StartContainer for \"08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05\" returns successfully" Oct 2 19:53:52.539072 env[1336]: time="2023-10-02T19:53:52.539012905Z" level=info msg="StartContainer for \"be6cf95ff2593f3a0c12be7971c21e8623e4db82b414c54a2e5a014ec6bdd46d\" returns successfully" Oct 2 19:53:52.961260 systemd[1]: run-containerd-runc-k8s.io-274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666-runc.UGhu6d.mount: Deactivated successfully. Oct 2 19:53:54.086266 kubelet[2074]: I1002 19:53:54.086234 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:54.095000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.095000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0005b81e0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:54.095000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:54.095000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.095000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000fe260 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:54.095000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:54.722000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.722000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c005e10570 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:53:54.722000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:54.738000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.738000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5a a1=c005e105d0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:53:54.738000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:54.738000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.738000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5a a1=c005e10600 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:53:54.738000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:54.762000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.762000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c006733140 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:53:54.762000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:54.980000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.980000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00a3f0820 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:53:54.980000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:54.980000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:54.980000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c006d36060 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:53:54.980000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:54.997531 kubelet[2074]: I1002 19:53:54.997491 2074 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:55.063912 kubelet[2074]: E1002 19:53:55.063871 2074 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-74431cd9b5\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:55.968317 kubelet[2074]: I1002 19:53:55.968270 2074 apiserver.go:52] "Watching apiserver" Oct 2 19:53:55.972968 kubelet[2074]: I1002 19:53:55.972936 2074 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:53:57.133000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.140200 kernel: kauditd_printk_skb: 601 callbacks suppressed Oct 2 19:53:57.140300 kernel: audit: type=1400 audit(1696276437.133:678): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.136000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.172735 kernel: audit: type=1400 audit(1696276437.136:679): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.172869 kernel: audit: type=1300 audit(1696276437.136:679): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c524c0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:57.136000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c524c0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:57.136000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.136000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.230064 kernel: audit: type=1327 audit(1696276437.136:679): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.230185 kernel: audit: type=1400 audit(1696276437.136:680): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.136000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c52500 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:57.252080 kernel: audit: type=1300 audit(1696276437.136:680): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c52500 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:57.253611 kernel: audit: type=1327 audit(1696276437.136:680): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.136000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.137000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.285927 kernel: audit: type=1400 audit(1696276437.137:681): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.137000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c52540 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:57.307610 kernel: audit: type=1300 audit(1696276437.137:681): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c52540 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:57.307736 kernel: audit: type=1327 audit(1696276437.137:681): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.137000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.133000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009bef20 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:57.133000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.594055 kubelet[2074]: W1002 19:53:57.594010 2074 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:53:57.816813 systemd[1]: Reloading. Oct 2 19:53:57.904203 /usr/lib/systemd/system-generators/torcx-generator[2370]: time="2023-10-02T19:53:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:57.912496 /usr/lib/systemd/system-generators/torcx-generator[2370]: time="2023-10-02T19:53:57Z" level=info msg="torcx already run" Oct 2 19:53:58.006541 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:58.006562 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:58.024375 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.109000 audit: BPF prog-id=86 op=LOAD Oct 2 19:53:58.109000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.111000 audit: BPF prog-id=87 op=LOAD Oct 2 19:53:58.111000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.113000 audit: BPF prog-id=88 op=LOAD Oct 2 19:53:58.113000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit: BPF prog-id=89 op=LOAD Oct 2 19:53:58.115000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit: BPF prog-id=90 op=LOAD Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit: BPF prog-id=91 op=LOAD Oct 2 19:53:58.115000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:53:58.115000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.115000 audit: BPF prog-id=92 op=LOAD Oct 2 19:53:58.115000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit: BPF prog-id=93 op=LOAD Oct 2 19:53:58.117000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.118000 audit: BPF prog-id=94 op=LOAD Oct 2 19:53:58.118000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit: BPF prog-id=95 op=LOAD Oct 2 19:53:58.119000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.119000 audit: BPF prog-id=96 op=LOAD Oct 2 19:53:58.120000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.121000 audit: BPF prog-id=97 op=LOAD Oct 2 19:53:58.121000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.122000 audit: BPF prog-id=98 op=LOAD Oct 2 19:53:58.122000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit: BPF prog-id=99 op=LOAD Oct 2 19:53:58.124000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit: BPF prog-id=100 op=LOAD Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.124000 audit: BPF prog-id=101 op=LOAD Oct 2 19:53:58.125000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:53:58.125000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit: BPF prog-id=102 op=LOAD Oct 2 19:53:58.128000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit: BPF prog-id=103 op=LOAD Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.128000 audit: BPF prog-id=104 op=LOAD Oct 2 19:53:58.128000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:53:58.128000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit: BPF prog-id=105 op=LOAD Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.129000 audit: BPF prog-id=106 op=LOAD Oct 2 19:53:58.129000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:53:58.129000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:53:58.149618 kubelet[2074]: I1002 19:53:58.148625 2074 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:53:58.148764 systemd[1]: Stopping kubelet.service... Oct 2 19:53:58.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:58.173975 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:53:58.174238 systemd[1]: Stopped kubelet.service. Oct 2 19:53:58.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:58.176867 systemd[1]: Started kubelet.service. Oct 2 19:53:58.260154 kubelet[2433]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:58.260154 kubelet[2433]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:53:58.260154 kubelet[2433]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:58.260680 kubelet[2433]: I1002 19:53:58.260219 2433 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:53:58.270727 kubelet[2433]: I1002 19:53:58.267553 2433 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:53:58.270727 kubelet[2433]: I1002 19:53:58.267604 2433 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:53:58.270727 kubelet[2433]: I1002 19:53:58.267881 2433 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:53:58.270727 kubelet[2433]: I1002 19:53:58.270232 2433 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:53:58.273084 kubelet[2433]: I1002 19:53:58.273055 2433 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:53:58.278834 kubelet[2433]: I1002 19:53:58.278806 2433 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:53:58.279044 kubelet[2433]: I1002 19:53:58.279025 2433 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:53:58.279216 kubelet[2433]: I1002 19:53:58.279196 2433 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:53:58.279353 kubelet[2433]: I1002 19:53:58.279227 2433 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:53:58.279353 kubelet[2433]: I1002 19:53:58.279238 2433 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:53:58.279353 kubelet[2433]: I1002 19:53:58.279278 2433 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:58.279480 kubelet[2433]: I1002 19:53:58.279383 2433 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:53:58.279480 kubelet[2433]: I1002 19:53:58.279402 2433 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:53:58.281868 kubelet[2433]: I1002 19:53:58.280011 2433 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:53:58.281868 kubelet[2433]: I1002 19:53:58.280034 2433 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:53:58.282152 kubelet[2433]: I1002 19:53:58.282135 2433 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:53:58.283740 kubelet[2433]: I1002 19:53:58.283717 2433 server.go:1232] "Started kubelet" Oct 2 19:53:58.286000 audit[2433]: AVC avc: denied { mac_admin } for pid=2433 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.286000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:58.286000 audit[2433]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b37da0 a1=c000c3e618 a2=c000b37d70 a3=25 items=0 ppid=1 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:58.286000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:58.288002 kubelet[2433]: I1002 19:53:58.287684 2433 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:53:58.288002 kubelet[2433]: I1002 19:53:58.287721 2433 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:53:58.288002 kubelet[2433]: I1002 19:53:58.287758 2433 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:53:58.286000 audit[2433]: AVC avc: denied { mac_admin } for pid=2433 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.286000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:58.286000 audit[2433]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000af91e0 a1=c000c3e630 a2=c000b37e30 a3=25 items=0 ppid=1 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:58.286000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:58.290298 kubelet[2433]: E1002 19:53:58.290276 2433 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:53:58.290513 kubelet[2433]: E1002 19:53:58.290306 2433 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:53:58.295230 kubelet[2433]: I1002 19:53:58.295205 2433 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:53:58.295927 kubelet[2433]: I1002 19:53:58.295906 2433 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:53:58.298503 kubelet[2433]: I1002 19:53:58.297712 2433 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:53:58.298503 kubelet[2433]: I1002 19:53:58.297882 2433 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:53:58.303608 kubelet[2433]: I1002 19:53:58.299892 2433 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:53:58.303608 kubelet[2433]: I1002 19:53:58.301509 2433 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:53:58.303608 kubelet[2433]: I1002 19:53:58.301674 2433 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:53:58.303608 kubelet[2433]: I1002 19:53:58.303307 2433 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:53:58.305326 kubelet[2433]: I1002 19:53:58.305305 2433 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:53:58.305398 kubelet[2433]: I1002 19:53:58.305337 2433 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:53:58.305398 kubelet[2433]: I1002 19:53:58.305355 2433 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:53:58.305485 kubelet[2433]: E1002 19:53:58.305406 2433 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:53:58.311000 audit[2456]: USER_ACCT pid=2456 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:58.312000 audit[2456]: CRED_REFR pid=2456 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:58.313834 sudo[2456]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:53:58.314449 sudo[2456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:53:58.318000 audit[2456]: USER_START pid=2456 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:58.406065 kubelet[2433]: E1002 19:53:58.406021 2433 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:53:58.407114 kubelet[2433]: I1002 19:53:58.407084 2433 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.411000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=4895 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:53:58.411000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000efce00 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:53:58.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:58.430485 kubelet[2433]: I1002 19:53:58.430330 2433 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.431430 kubelet[2433]: I1002 19:53:58.431412 2433 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.473765 kubelet[2433]: I1002 19:53:58.473666 2433 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:53:58.474036 kubelet[2433]: I1002 19:53:58.474026 2433 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:53:58.474227 kubelet[2433]: I1002 19:53:58.474215 2433 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:58.474469 kubelet[2433]: I1002 19:53:58.474459 2433 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:53:58.474686 kubelet[2433]: I1002 19:53:58.474675 2433 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:53:58.474807 kubelet[2433]: I1002 19:53:58.474796 2433 policy_none.go:49] "None policy: Start" Oct 2 19:53:58.480647 kubelet[2433]: I1002 19:53:58.475621 2433 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:53:58.480647 kubelet[2433]: I1002 19:53:58.475645 2433 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:53:58.480647 kubelet[2433]: I1002 19:53:58.475800 2433 state_mem.go:75] "Updated machine memory state" Oct 2 19:53:58.483952 kubelet[2433]: I1002 19:53:58.483931 2433 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:53:58.482000 audit[2433]: AVC avc: denied { mac_admin } for pid=2433 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:58.482000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:58.482000 audit[2433]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0010c3500 a1=c0010cd308 a2=c0010c34d0 a3=25 items=0 ppid=1 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:58.482000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:58.484348 kubelet[2433]: I1002 19:53:58.484006 2433 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:53:58.487923 kubelet[2433]: I1002 19:53:58.486137 2433 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:53:58.606920 kubelet[2433]: I1002 19:53:58.606881 2433 topology_manager.go:215] "Topology Admit Handler" podUID="9f488878691ca48a7b8d409e41015ae3" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.607110 kubelet[2433]: I1002 19:53:58.607024 2433 topology_manager.go:215] "Topology Admit Handler" podUID="5642080e4c1fe57851780e7074ce3fb6" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.607110 kubelet[2433]: I1002 19:53:58.607087 2433 topology_manager.go:215] "Topology Admit Handler" podUID="c8b3191be97163cc7c509528a955b7a0" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.619409 kubelet[2433]: W1002 19:53:58.619376 2433 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:53:58.622245 kubelet[2433]: W1002 19:53:58.622217 2433 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:53:58.622377 kubelet[2433]: E1002 19:53:58.622303 2433 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-74431cd9b5\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.635268 kubelet[2433]: W1002 19:53:58.635227 2433 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:53:58.713512 kubelet[2433]: I1002 19:53:58.713415 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9f488878691ca48a7b8d409e41015ae3-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74431cd9b5\" (UID: \"9f488878691ca48a7b8d409e41015ae3\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.713758 kubelet[2433]: I1002 19:53:58.713734 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9f488878691ca48a7b8d409e41015ae3-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-74431cd9b5\" (UID: \"9f488878691ca48a7b8d409e41015ae3\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.713881 kubelet[2433]: I1002 19:53:58.713871 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.713974 kubelet[2433]: I1002 19:53:58.713965 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.714080 kubelet[2433]: I1002 19:53:58.714071 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9f488878691ca48a7b8d409e41015ae3-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74431cd9b5\" (UID: \"9f488878691ca48a7b8d409e41015ae3\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.714195 kubelet[2433]: I1002 19:53:58.714172 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.714266 kubelet[2433]: I1002 19:53:58.714219 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.714266 kubelet[2433]: I1002 19:53:58.714261 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5642080e4c1fe57851780e7074ce3fb6-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-74431cd9b5\" (UID: \"5642080e4c1fe57851780e7074ce3fb6\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.714349 kubelet[2433]: I1002 19:53:58.714299 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c8b3191be97163cc7c509528a955b7a0-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-74431cd9b5\" (UID: \"c8b3191be97163cc7c509528a955b7a0\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-74431cd9b5" Oct 2 19:53:58.938675 sudo[2456]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:58.937000 audit[2456]: USER_END pid=2456 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:58.937000 audit[2456]: CRED_DISP pid=2456 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:59.281763 kubelet[2433]: I1002 19:53:59.281723 2433 apiserver.go:52] "Watching apiserver" Oct 2 19:53:59.301734 kubelet[2433]: I1002 19:53:59.301695 2433 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:53:59.424526 kubelet[2433]: I1002 19:53:59.424487 2433 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-74431cd9b5" podStartSLOduration=2.424431218 podCreationTimestamp="2023-10-02 19:53:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:59.417157201 +0000 UTC m=+1.232419296" watchObservedRunningTime="2023-10-02 19:53:59.424431218 +0000 UTC m=+1.239693413" Oct 2 19:53:59.433065 kubelet[2433]: I1002 19:53:59.433038 2433 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" podStartSLOduration=1.432983638 podCreationTimestamp="2023-10-02 19:53:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:59.424830219 +0000 UTC m=+1.240092314" watchObservedRunningTime="2023-10-02 19:53:59.432983638 +0000 UTC m=+1.248245733" Oct 2 19:53:59.443305 kubelet[2433]: I1002 19:53:59.443280 2433 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-74431cd9b5" podStartSLOduration=1.443233861 podCreationTimestamp="2023-10-02 19:53:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:59.433499739 +0000 UTC m=+1.248761834" watchObservedRunningTime="2023-10-02 19:53:59.443233861 +0000 UTC m=+1.258495956" Oct 2 19:53:59.806418 sudo[1667]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:59.804000 audit[1667]: USER_END pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:59.805000 audit[1667]: CRED_DISP pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:59.905956 sshd[1664]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:59.906000 audit[1664]: USER_END pid=1664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:59.906000 audit[1664]: CRED_DISP pid=1664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:59.910054 systemd[1]: sshd@6-10.200.8.19:22-10.200.12.6:39424.service: Deactivated successfully. Oct 2 19:53:59.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.19:22-10.200.12.6:39424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:59.911314 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:53:59.911636 systemd[1]: session-9.scope: Consumed 3.587s CPU time. Oct 2 19:53:59.912293 systemd-logind[1317]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:53:59.913388 systemd-logind[1317]: Removed session 9. Oct 2 19:54:10.130855 kubelet[2433]: I1002 19:54:10.130820 2433 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:54:10.131422 env[1336]: time="2023-10-02T19:54:10.131296122Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:54:10.131773 kubelet[2433]: I1002 19:54:10.131651 2433 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:54:10.546069 kubelet[2433]: I1002 19:54:10.546024 2433 topology_manager.go:215] "Topology Admit Handler" podUID="4400c8eb-d048-42db-a8bc-b286119dcd75" podNamespace="kube-system" podName="kube-proxy-mw6rf" Oct 2 19:54:10.552413 systemd[1]: Created slice kubepods-besteffort-pod4400c8eb_d048_42db_a8bc_b286119dcd75.slice. Oct 2 19:54:10.565002 kubelet[2433]: I1002 19:54:10.564967 2433 topology_manager.go:215] "Topology Admit Handler" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" podNamespace="kube-system" podName="cilium-xfbgd" Oct 2 19:54:10.586906 systemd[1]: Created slice kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice. Oct 2 19:54:10.596773 kubelet[2433]: I1002 19:54:10.596736 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/4400c8eb-d048-42db-a8bc-b286119dcd75-kube-proxy\") pod \"kube-proxy-mw6rf\" (UID: \"4400c8eb-d048-42db-a8bc-b286119dcd75\") " pod="kube-system/kube-proxy-mw6rf" Oct 2 19:54:10.596929 kubelet[2433]: I1002 19:54:10.596794 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cni-path\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.596929 kubelet[2433]: I1002 19:54:10.596821 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4400c8eb-d048-42db-a8bc-b286119dcd75-xtables-lock\") pod \"kube-proxy-mw6rf\" (UID: \"4400c8eb-d048-42db-a8bc-b286119dcd75\") " pod="kube-system/kube-proxy-mw6rf" Oct 2 19:54:10.596929 kubelet[2433]: I1002 19:54:10.596847 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-etc-cni-netd\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.596929 kubelet[2433]: I1002 19:54:10.596875 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hubble-tls\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.596929 kubelet[2433]: I1002 19:54:10.596901 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-kernel\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.596929 kubelet[2433]: I1002 19:54:10.596929 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d2zmk\" (UniqueName: \"kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-kube-api-access-d2zmk\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597192 kubelet[2433]: I1002 19:54:10.596957 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-bpf-maps\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597192 kubelet[2433]: I1002 19:54:10.596985 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-run\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597192 kubelet[2433]: I1002 19:54:10.597012 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-xtables-lock\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597192 kubelet[2433]: I1002 19:54:10.597041 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-config-path\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597192 kubelet[2433]: I1002 19:54:10.597071 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4400c8eb-d048-42db-a8bc-b286119dcd75-lib-modules\") pod \"kube-proxy-mw6rf\" (UID: \"4400c8eb-d048-42db-a8bc-b286119dcd75\") " pod="kube-system/kube-proxy-mw6rf" Oct 2 19:54:10.597192 kubelet[2433]: I1002 19:54:10.597097 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-lib-modules\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597423 kubelet[2433]: I1002 19:54:10.597126 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-net\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597423 kubelet[2433]: I1002 19:54:10.597155 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hostproc\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597423 kubelet[2433]: I1002 19:54:10.597183 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-cgroup\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597423 kubelet[2433]: I1002 19:54:10.597214 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-clustermesh-secrets\") pod \"cilium-xfbgd\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " pod="kube-system/cilium-xfbgd" Oct 2 19:54:10.597423 kubelet[2433]: I1002 19:54:10.597249 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sjc85\" (UniqueName: \"kubernetes.io/projected/4400c8eb-d048-42db-a8bc-b286119dcd75-kube-api-access-sjc85\") pod \"kube-proxy-mw6rf\" (UID: \"4400c8eb-d048-42db-a8bc-b286119dcd75\") " pod="kube-system/kube-proxy-mw6rf" Oct 2 19:54:10.859440 env[1336]: time="2023-10-02T19:54:10.859309750Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-mw6rf,Uid:4400c8eb-d048-42db-a8bc-b286119dcd75,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:10.895826 env[1336]: time="2023-10-02T19:54:10.895761621Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-xfbgd,Uid:1ed762b1-005f-4ae8-8f6c-09ebf556be1f,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:10.896597 env[1336]: time="2023-10-02T19:54:10.896491623Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:10.896597 env[1336]: time="2023-10-02T19:54:10.896538023Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:10.896597 env[1336]: time="2023-10-02T19:54:10.896553823Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:10.896867 env[1336]: time="2023-10-02T19:54:10.896699623Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/981d646eef62bcee05a82897b3fed63f93c29c701d2b032c954f0ed0f6769d57 pid=2508 runtime=io.containerd.runc.v2 Oct 2 19:54:10.912710 systemd[1]: Started cri-containerd-981d646eef62bcee05a82897b3fed63f93c29c701d2b032c954f0ed0f6769d57.scope. Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.939945 env[1336]: time="2023-10-02T19:54:10.938929006Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:10.939945 env[1336]: time="2023-10-02T19:54:10.939022706Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:10.939945 env[1336]: time="2023-10-02T19:54:10.939055606Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:10.939945 env[1336]: time="2023-10-02T19:54:10.939203607Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4 pid=2543 runtime=io.containerd.runc.v2 Oct 2 19:54:10.944572 kernel: kauditd_printk_skb: 273 callbacks suppressed Oct 2 19:54:10.944681 kernel: audit: type=1400 audit(1696276450.938:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.973672 kernel: audit: type=1400 audit(1696276450.938:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.973772 kernel: audit: type=1400 audit(1696276450.938:944): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.001643 kernel: audit: type=1400 audit(1696276450.938:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.003574 systemd[1]: Started cri-containerd-a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4.scope. Oct 2 19:54:11.031612 kernel: audit: type=1400 audit(1696276450.938:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.031724 kernel: audit: type=1400 audit(1696276450.938:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.031750 kernel: audit: type=1400 audit(1696276450.938:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.058665 kernel: audit: type=1400 audit(1696276450.938:949): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.078794 kernel: audit: type=1400 audit(1696276450.938:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.078919 kernel: audit: type=1400 audit(1696276450.938:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.081640 env[1336]: time="2023-10-02T19:54:11.081601184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-mw6rf,Uid:4400c8eb-d048-42db-a8bc-b286119dcd75,Namespace:kube-system,Attempt:0,} returns sandbox id \"981d646eef62bcee05a82897b3fed63f93c29c701d2b032c954f0ed0f6769d57\"" Oct 2 19:54:11.086080 env[1336]: time="2023-10-02T19:54:11.086050292Z" level=info msg="CreateContainer within sandbox \"981d646eef62bcee05a82897b3fed63f93c29c701d2b032c954f0ed0f6769d57\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:54:10.938000 audit: BPF prog-id=107 op=LOAD Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:10.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938316436343665656636326263656530356138323839376233666564 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:10.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938316436343665656636326263656530356138323839376233666564 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.958000 audit: BPF prog-id=108 op=LOAD Oct 2 19:54:10.958000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00015d4d0 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:10.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938316436343665656636326263656530356138323839376233666564 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit: BPF prog-id=109 op=LOAD Oct 2 19:54:10.986000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00015d518 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:10.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938316436343665656636326263656530356138323839376233666564 Oct 2 19:54:10.986000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:54:10.986000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:10.986000 audit: BPF prog-id=110 op=LOAD Oct 2 19:54:10.986000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00015d928 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:10.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938316436343665656636326263656530356138323839376233666564 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.057000 audit: BPF prog-id=111 op=LOAD Oct 2 19:54:11.060000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.060000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2543 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136646263653764323662326166363337383639396437306634383963 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2543 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136646263653764323662326166363337383639396437306634383963 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit: BPF prog-id=112 op=LOAD Oct 2 19:54:11.092000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000185eb0 items=0 ppid=2543 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136646263653764323662326166363337383639396437306634383963 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit: BPF prog-id=113 op=LOAD Oct 2 19:54:11.092000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000185ef8 items=0 ppid=2543 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136646263653764323662326166363337383639396437306634383963 Oct 2 19:54:11.092000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:54:11.092000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.092000 audit: BPF prog-id=114 op=LOAD Oct 2 19:54:11.092000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cc308 items=0 ppid=2543 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136646263653764323662326166363337383639396437306634383963 Oct 2 19:54:11.121026 env[1336]: time="2023-10-02T19:54:11.120904560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-xfbgd,Uid:1ed762b1-005f-4ae8-8f6c-09ebf556be1f,Namespace:kube-system,Attempt:0,} returns sandbox id \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\"" Oct 2 19:54:11.125647 env[1336]: time="2023-10-02T19:54:11.125575869Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:54:11.141295 kubelet[2433]: I1002 19:54:11.140479 2433 topology_manager.go:215] "Topology Admit Handler" podUID="306c8892-42fb-48f3-a411-bf69c6bf5218" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-6j278" Oct 2 19:54:11.148949 systemd[1]: Created slice kubepods-besteffort-pod306c8892_42fb_48f3_a411_bf69c6bf5218.slice. Oct 2 19:54:11.152839 env[1336]: time="2023-10-02T19:54:11.152791621Z" level=info msg="CreateContainer within sandbox \"981d646eef62bcee05a82897b3fed63f93c29c701d2b032c954f0ed0f6769d57\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"96f18f38bdeebed8beadddb137064c02d76eb2103835db778d1fd3c4f98f1e1f\"" Oct 2 19:54:11.154317 env[1336]: time="2023-10-02T19:54:11.154282624Z" level=info msg="StartContainer for \"96f18f38bdeebed8beadddb137064c02d76eb2103835db778d1fd3c4f98f1e1f\"" Oct 2 19:54:11.188236 systemd[1]: Started cri-containerd-96f18f38bdeebed8beadddb137064c02d76eb2103835db778d1fd3c4f98f1e1f.scope. Oct 2 19:54:11.203511 kubelet[2433]: I1002 19:54:11.203403 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vgpxj\" (UniqueName: \"kubernetes.io/projected/306c8892-42fb-48f3-a411-bf69c6bf5218-kube-api-access-vgpxj\") pod \"cilium-operator-6bc8ccdb58-6j278\" (UID: \"306c8892-42fb-48f3-a411-bf69c6bf5218\") " pod="kube-system/cilium-operator-6bc8ccdb58-6j278" Oct 2 19:54:11.203511 kubelet[2433]: I1002 19:54:11.203444 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/306c8892-42fb-48f3-a411-bf69c6bf5218-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-6j278\" (UID: \"306c8892-42fb-48f3-a411-bf69c6bf5218\") " pod="kube-system/cilium-operator-6bc8ccdb58-6j278" Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2508 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936663138663338626465656265643862656164646462313337303634 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.213000 audit: BPF prog-id=115 op=LOAD Oct 2 19:54:11.213000 audit[2591]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003de010 items=0 ppid=2508 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936663138663338626465656265643862656164646462313337303634 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.214000 audit: BPF prog-id=116 op=LOAD Oct 2 19:54:11.214000 audit[2591]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003de058 items=0 ppid=2508 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936663138663338626465656265643862656164646462313337303634 Oct 2 19:54:11.214000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:54:11.214000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.215000 audit: BPF prog-id=117 op=LOAD Oct 2 19:54:11.215000 audit[2591]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003de0e8 items=0 ppid=2508 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936663138663338626465656265643862656164646462313337303634 Oct 2 19:54:11.238820 env[1336]: time="2023-10-02T19:54:11.238780588Z" level=info msg="StartContainer for \"96f18f38bdeebed8beadddb137064c02d76eb2103835db778d1fd3c4f98f1e1f\" returns successfully" Oct 2 19:54:11.296000 audit[2642]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.296000 audit[2642]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe18331ba0 a2=0 a3=7ffe18331b8c items=0 ppid=2601 pid=2642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.296000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:54:11.299000 audit[2645]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.299000 audit[2645]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe74b0d370 a2=0 a3=7ffe74b0d35c items=0 ppid=2601 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.299000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:54:11.301000 audit[2641]: NETFILTER_CFG table=mangle:44 family=2 entries=1 op=nft_register_chain pid=2641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.301000 audit[2641]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee4ef6c40 a2=0 a3=7ffee4ef6c2c items=0 ppid=2601 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.301000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:54:11.302000 audit[2646]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_chain pid=2646 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.302000 audit[2646]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff33247d40 a2=0 a3=7fff33247d2c items=0 ppid=2601 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.302000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:54:11.309000 audit[2647]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_register_chain pid=2647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.309000 audit[2647]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0125f630 a2=0 a3=7ffd0125f61c items=0 ppid=2601 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:54:11.312000 audit[2648]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.312000 audit[2648]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd123d7e50 a2=0 a3=7ffd123d7e3c items=0 ppid=2601 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:54:11.396000 audit[2650]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.396000 audit[2650]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc7116aec0 a2=0 a3=7ffc7116aeac items=0 ppid=2601 pid=2650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:54:11.401000 audit[2652]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.401000 audit[2652]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd42315d40 a2=0 a3=7ffd42315d2c items=0 ppid=2601 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.401000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:54:11.405000 audit[2655]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.405000 audit[2655]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe351063e0 a2=0 a3=7ffe351063cc items=0 ppid=2601 pid=2655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.405000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:54:11.406000 audit[2656]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2656 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.406000 audit[2656]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9180f860 a2=0 a3=7fff9180f84c items=0 ppid=2601 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.406000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:54:11.408000 audit[2658]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2658 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.408000 audit[2658]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc9bd61710 a2=0 a3=7ffc9bd616fc items=0 ppid=2601 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.408000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:54:11.410000 audit[2659]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2659 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.410000 audit[2659]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdde348cf0 a2=0 a3=7ffdde348cdc items=0 ppid=2601 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:54:11.415000 audit[2661]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2661 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.415000 audit[2661]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc3ca40330 a2=0 a3=7ffc3ca4031c items=0 ppid=2601 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:54:11.421000 audit[2664]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2664 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.421000 audit[2664]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffce6ad3280 a2=0 a3=7ffce6ad326c items=0 ppid=2601 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.421000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:54:11.423000 audit[2665]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.423000 audit[2665]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8777ce00 a2=0 a3=7ffc8777cdec items=0 ppid=2601 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.423000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:54:11.426000 audit[2667]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.426000 audit[2667]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffb6cd6800 a2=0 a3=7fffb6cd67ec items=0 ppid=2601 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.426000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:54:11.429114 kubelet[2433]: I1002 19:54:11.429088 2433 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-mw6rf" podStartSLOduration=1.429018956 podCreationTimestamp="2023-10-02 19:54:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:11.427507453 +0000 UTC m=+13.242769548" watchObservedRunningTime="2023-10-02 19:54:11.429018956 +0000 UTC m=+13.244281151" Oct 2 19:54:11.428000 audit[2668]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2668 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.428000 audit[2668]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc33e9f5b0 a2=0 a3=7ffc33e9f59c items=0 ppid=2601 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:54:11.432000 audit[2670]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2670 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.432000 audit[2670]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdb3044da0 a2=0 a3=7ffdb3044d8c items=0 ppid=2601 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.432000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:54:11.437000 audit[2673]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.437000 audit[2673]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffde4970150 a2=0 a3=7ffde497013c items=0 ppid=2601 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.437000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:54:11.441000 audit[2676]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.441000 audit[2676]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcddda4500 a2=0 a3=7ffcddda44ec items=0 ppid=2601 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:54:11.442000 audit[2677]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.442000 audit[2677]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd9cf589c0 a2=0 a3=7ffd9cf589ac items=0 ppid=2601 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:54:11.445000 audit[2679]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.445000 audit[2679]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc21ae7460 a2=0 a3=7ffc21ae744c items=0 ppid=2601 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.445000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:11.448000 audit[2682]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.448000 audit[2682]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc602367b0 a2=0 a3=7ffc6023679c items=0 ppid=2601 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:11.449000 audit[2683]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.449000 audit[2683]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdcd19b0f0 a2=0 a3=7ffdcd19b0dc items=0 ppid=2601 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:54:11.452000 audit[2685]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:11.452000 audit[2685]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd45ff2c40 a2=0 a3=7ffd45ff2c2c items=0 ppid=2601 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:54:11.454599 env[1336]: time="2023-10-02T19:54:11.454540305Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-6j278,Uid:306c8892-42fb-48f3-a411-bf69c6bf5218,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:11.499729 env[1336]: time="2023-10-02T19:54:11.499481492Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:11.499729 env[1336]: time="2023-10-02T19:54:11.499516892Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:11.499729 env[1336]: time="2023-10-02T19:54:11.499527192Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:11.500073 env[1336]: time="2023-10-02T19:54:11.500031793Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0 pid=2702 runtime=io.containerd.runc.v2 Oct 2 19:54:11.515258 systemd[1]: Started cri-containerd-782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0.scope. Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit: BPF prog-id=118 op=LOAD Oct 2 19:54:11.532000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.532000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2702 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323537376334666235326362336233633438656638353936623361 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2702 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323537376334666235326362336233633438656638353936623361 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit: BPF prog-id=119 op=LOAD Oct 2 19:54:11.533000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000292340 items=0 ppid=2702 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323537376334666235326362336233633438656638353936623361 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.533000 audit: BPF prog-id=120 op=LOAD Oct 2 19:54:11.533000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000292388 items=0 ppid=2702 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323537376334666235326362336233633438656638353936623361 Oct 2 19:54:11.534000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:54:11.534000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:11.534000 audit: BPF prog-id=121 op=LOAD Oct 2 19:54:11.534000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000292798 items=0 ppid=2702 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323537376334666235326362336233633438656638353936623361 Oct 2 19:54:11.536000 audit[2691]: NETFILTER_CFG table=filter:67 family=2 entries=8 op=nft_register_rule pid=2691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:54:11.536000 audit[2691]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fffc0a1ef10 a2=0 a3=7fffc0a1eefc items=0 ppid=2601 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.536000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:11.565820 env[1336]: time="2023-10-02T19:54:11.565770020Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-6j278,Uid:306c8892-42fb-48f3-a411-bf69c6bf5218,Namespace:kube-system,Attempt:0,} returns sandbox id \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\"" Oct 2 19:54:11.569000 audit[2691]: NETFILTER_CFG table=nat:68 family=2 entries=14 op=nft_register_chain pid=2691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:54:11.569000 audit[2691]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fffc0a1ef10 a2=0 a3=7fffc0a1eefc items=0 ppid=2601 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.569000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:11.575000 audit[2737]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_chain pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.575000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcf0aba410 a2=0 a3=7ffcf0aba3fc items=0 ppid=2601 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.575000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:54:11.579000 audit[2739]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.579000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdac854e00 a2=0 a3=7ffdac854dec items=0 ppid=2601 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.579000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:54:11.583000 audit[2742]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.583000 audit[2742]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd0825f8d0 a2=0 a3=7ffd0825f8bc items=0 ppid=2601 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:54:11.584000 audit[2743]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.584000 audit[2743]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf3a5b2c0 a2=0 a3=7ffcf3a5b2ac items=0 ppid=2601 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:54:11.586000 audit[2745]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.586000 audit[2745]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd49b0a80 a2=0 a3=7fffd49b0a6c items=0 ppid=2601 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.586000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:54:11.587000 audit[2746]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.587000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd317b920 a2=0 a3=7fffd317b90c items=0 ppid=2601 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.587000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:54:11.590000 audit[2748]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.590000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd949f7240 a2=0 a3=7ffd949f722c items=0 ppid=2601 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.590000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:54:11.595000 audit[2751]: NETFILTER_CFG table=filter:76 family=10 entries=2 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.595000 audit[2751]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd9524f3d0 a2=0 a3=7ffd9524f3bc items=0 ppid=2601 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.595000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:54:11.596000 audit[2752]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.596000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf901d7f0 a2=0 a3=7ffdf901d7dc items=0 ppid=2601 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.596000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:54:11.599000 audit[2754]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.599000 audit[2754]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc36161910 a2=0 a3=7ffc361618fc items=0 ppid=2601 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.599000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:54:11.600000 audit[2755]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.600000 audit[2755]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec27ab2f0 a2=0 a3=7ffec27ab2dc items=0 ppid=2601 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.600000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:54:11.602000 audit[2757]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.602000 audit[2757]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe5c5b9e00 a2=0 a3=7ffe5c5b9dec items=0 ppid=2601 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:54:11.606000 audit[2760]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.606000 audit[2760]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd75866a90 a2=0 a3=7ffd75866a7c items=0 ppid=2601 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.606000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:54:11.610000 audit[2763]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.610000 audit[2763]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff250ce380 a2=0 a3=7fff250ce36c items=0 ppid=2601 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.610000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:54:11.611000 audit[2764]: NETFILTER_CFG table=nat:83 family=10 entries=1 op=nft_register_chain pid=2764 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.611000 audit[2764]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd002101e0 a2=0 a3=7ffd002101cc items=0 ppid=2601 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.611000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:54:11.613000 audit[2766]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.613000 audit[2766]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff8c5a61a0 a2=0 a3=7fff8c5a618c items=0 ppid=2601 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.613000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:11.617000 audit[2769]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.617000 audit[2769]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff14cbc700 a2=0 a3=7fff14cbc6ec items=0 ppid=2601 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.617000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:11.618000 audit[2770]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.618000 audit[2770]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4b1b4840 a2=0 a3=7fff4b1b482c items=0 ppid=2601 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.618000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:54:11.621000 audit[2772]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.621000 audit[2772]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffeda971bc0 a2=0 a3=7ffeda971bac items=0 ppid=2601 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.621000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:54:11.622000 audit[2773]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2773 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.622000 audit[2773]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeff8e1da0 a2=0 a3=7ffeff8e1d8c items=0 ppid=2601 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.622000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:54:11.624000 audit[2775]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.624000 audit[2775]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc98c95610 a2=0 a3=7ffc98c955fc items=0 ppid=2601 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.624000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:11.628000 audit[2778]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:11.628000 audit[2778]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff61496ae0 a2=0 a3=7fff61496acc items=0 ppid=2601 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.628000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:11.630000 audit[2780]: NETFILTER_CFG table=filter:91 family=10 entries=3 op=nft_register_rule pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:54:11.630000 audit[2780]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffdb3ca8b70 a2=0 a3=7ffdb3ca8b5c items=0 ppid=2601 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.630000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:11.631000 audit[2780]: NETFILTER_CFG table=nat:92 family=10 entries=7 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:54:11.631000 audit[2780]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffdb3ca8b70 a2=0 a3=7ffdb3ca8b5c items=0 ppid=2601 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:11.631000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:17.570471 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2852964926.mount: Deactivated successfully. Oct 2 19:54:20.343801 env[1336]: time="2023-10-02T19:54:20.343749954Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:20.350702 env[1336]: time="2023-10-02T19:54:20.350658666Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:20.356320 env[1336]: time="2023-10-02T19:54:20.356285476Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:20.356861 env[1336]: time="2023-10-02T19:54:20.356821377Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:54:20.357615 env[1336]: time="2023-10-02T19:54:20.357518978Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:54:20.361161 env[1336]: time="2023-10-02T19:54:20.361125784Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:54:20.392829 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1745639636.mount: Deactivated successfully. Oct 2 19:54:20.401905 env[1336]: time="2023-10-02T19:54:20.401860555Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\"" Oct 2 19:54:20.403554 env[1336]: time="2023-10-02T19:54:20.402445256Z" level=info msg="StartContainer for \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\"" Oct 2 19:54:20.431501 systemd[1]: Started cri-containerd-0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345.scope. Oct 2 19:54:20.443959 systemd[1]: cri-containerd-0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345.scope: Deactivated successfully. Oct 2 19:54:21.389564 systemd[1]: run-containerd-runc-k8s.io-0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345-runc.L51NLg.mount: Deactivated successfully. Oct 2 19:54:21.389747 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345-rootfs.mount: Deactivated successfully. Oct 2 19:54:22.438173 env[1336]: time="2023-10-02T19:54:22.438030434Z" level=error msg="get state for 0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345" error="context deadline exceeded: unknown" Oct 2 19:54:22.438173 env[1336]: time="2023-10-02T19:54:22.438162634Z" level=warning msg="unknown status" status=0 Oct 2 19:54:24.099822 env[1336]: time="2023-10-02T19:54:24.099752716Z" level=info msg="shim disconnected" id=0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345 Oct 2 19:54:24.099822 env[1336]: time="2023-10-02T19:54:24.099818316Z" level=warning msg="cleaning up after shim disconnected" id=0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345 namespace=k8s.io Oct 2 19:54:24.099822 env[1336]: time="2023-10-02T19:54:24.099829816Z" level=info msg="cleaning up dead shim" Oct 2 19:54:24.109089 env[1336]: time="2023-10-02T19:54:24.109034231Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2808 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:24.109881 env[1336]: time="2023-10-02T19:54:24.109724833Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:54:24.110527 env[1336]: time="2023-10-02T19:54:24.110477934Z" level=error msg="Failed to pipe stderr of container \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\"" error="reading from a closed fifo" Oct 2 19:54:24.110630 env[1336]: time="2023-10-02T19:54:24.110569234Z" level=error msg="Failed to pipe stdout of container \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\"" error="reading from a closed fifo" Oct 2 19:54:24.114401 env[1336]: time="2023-10-02T19:54:24.114360540Z" level=error msg="StartContainer for \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:24.114623 kubelet[2433]: E1002 19:54:24.114565 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345" Oct 2 19:54:24.114975 kubelet[2433]: E1002 19:54:24.114741 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:24.114975 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:24.114975 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 19:54:24.116783 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2zmk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:24.116783 kubelet[2433]: E1002 19:54:24.114803 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:54:24.451846 env[1336]: time="2023-10-02T19:54:24.450814596Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:54:24.543381 env[1336]: time="2023-10-02T19:54:24.543325449Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\"" Oct 2 19:54:24.544040 env[1336]: time="2023-10-02T19:54:24.544006350Z" level=info msg="StartContainer for \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\"" Oct 2 19:54:24.577357 systemd[1]: Started cri-containerd-02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d.scope. Oct 2 19:54:24.591978 systemd[1]: cri-containerd-02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d.scope: Deactivated successfully. Oct 2 19:54:24.607952 env[1336]: time="2023-10-02T19:54:24.607889955Z" level=info msg="shim disconnected" id=02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d Oct 2 19:54:24.607952 env[1336]: time="2023-10-02T19:54:24.607950755Z" level=warning msg="cleaning up after shim disconnected" id=02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d namespace=k8s.io Oct 2 19:54:24.607952 env[1336]: time="2023-10-02T19:54:24.607961955Z" level=info msg="cleaning up dead shim" Oct 2 19:54:24.616323 env[1336]: time="2023-10-02T19:54:24.616260569Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2844 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:24.616656 env[1336]: time="2023-10-02T19:54:24.616567370Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:54:24.617816 env[1336]: time="2023-10-02T19:54:24.617768372Z" level=error msg="Failed to pipe stdout of container \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\"" error="reading from a closed fifo" Oct 2 19:54:24.618888 env[1336]: time="2023-10-02T19:54:24.618848773Z" level=error msg="Failed to pipe stderr of container \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\"" error="reading from a closed fifo" Oct 2 19:54:24.623596 env[1336]: time="2023-10-02T19:54:24.623541281Z" level=error msg="StartContainer for \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:24.623895 kubelet[2433]: E1002 19:54:24.623861 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d" Oct 2 19:54:24.624050 kubelet[2433]: E1002 19:54:24.624018 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:24.624050 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:24.624050 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 19:54:24.624050 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2zmk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:24.624322 kubelet[2433]: E1002 19:54:24.624077 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:54:25.452168 kubelet[2433]: I1002 19:54:25.452128 2433 scope.go:117] "RemoveContainer" containerID="0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345" Oct 2 19:54:25.452747 kubelet[2433]: I1002 19:54:25.452711 2433 scope.go:117] "RemoveContainer" containerID="0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345" Oct 2 19:54:25.472172 env[1336]: time="2023-10-02T19:54:25.472050774Z" level=info msg="RemoveContainer for \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\"" Oct 2 19:54:25.481447 systemd[1]: run-containerd-runc-k8s.io-02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d-runc.CIgBLp.mount: Deactivated successfully. Oct 2 19:54:25.481565 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d-rootfs.mount: Deactivated successfully. Oct 2 19:54:25.486429 env[1336]: time="2023-10-02T19:54:25.486387398Z" level=info msg="RemoveContainer for \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\" returns successfully" Oct 2 19:54:25.487223 env[1336]: time="2023-10-02T19:54:25.487195199Z" level=info msg="RemoveContainer for \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\"" Oct 2 19:54:25.487363 env[1336]: time="2023-10-02T19:54:25.487341899Z" level=info msg="RemoveContainer for \"0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345\" returns successfully" Oct 2 19:54:25.487990 kubelet[2433]: E1002 19:54:25.487965 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:54:25.711883 env[1336]: time="2023-10-02T19:54:25.711750766Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.720325 env[1336]: time="2023-10-02T19:54:25.720276180Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.726855 env[1336]: time="2023-10-02T19:54:25.726809990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.727438 env[1336]: time="2023-10-02T19:54:25.727399691Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:54:25.730785 env[1336]: time="2023-10-02T19:54:25.730756597Z" level=info msg="CreateContainer within sandbox \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:54:25.768626 env[1336]: time="2023-10-02T19:54:25.768563159Z" level=info msg="CreateContainer within sandbox \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\"" Oct 2 19:54:25.769520 env[1336]: time="2023-10-02T19:54:25.769490860Z" level=info msg="StartContainer for \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\"" Oct 2 19:54:25.789961 systemd[1]: Started cri-containerd-8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858.scope. Oct 2 19:54:25.827165 kernel: kauditd_printk_skb: 357 callbacks suppressed Oct 2 19:54:25.827339 kernel: audit: type=1400 audit(1696276465.808:1053): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.855237 kernel: audit: type=1400 audit(1696276465.808:1054): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.855402 kernel: audit: type=1400 audit(1696276465.808:1055): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.869319 kernel: audit: type=1400 audit(1696276465.808:1056): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.869417 kernel: audit: type=1400 audit(1696276465.808:1057): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.882679 kernel: audit: type=1400 audit(1696276465.808:1058): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.909039 kernel: audit: type=1400 audit(1696276465.808:1059): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.909165 kernel: audit: type=1400 audit(1696276465.808:1060): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.929694 env[1336]: time="2023-10-02T19:54:25.929648222Z" level=info msg="StartContainer for \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\" returns successfully" Oct 2 19:54:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.952286 kernel: audit: type=1400 audit(1696276465.808:1061): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.952441 kernel: audit: type=1400 audit(1696276465.826:1062): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.826000 audit: BPF prog-id=122 op=LOAD Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2702 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:25.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863646231363230643865373036313765393437363765636263656639 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2702 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:25.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863646231363230643865373036313765393437363765636263656639 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.827000 audit: BPF prog-id=123 op=LOAD Oct 2 19:54:25.827000 audit[2865]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001e50d0 items=0 ppid=2702 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:25.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863646231363230643865373036313765393437363765636263656639 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.840000 audit: BPF prog-id=124 op=LOAD Oct 2 19:54:25.840000 audit[2865]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001e5118 items=0 ppid=2702 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:25.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863646231363230643865373036313765393437363765636263656639 Oct 2 19:54:25.854000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:54:25.854000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:25.854000 audit: BPF prog-id=125 op=LOAD Oct 2 19:54:25.854000 audit[2865]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001e5528 items=0 ppid=2702 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:25.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863646231363230643865373036313765393437363765636263656639 Oct 2 19:54:25.956000 audit[2875]: AVC avc: denied { map_create } for pid=2875 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c818 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c818 tclass=bpf permissive=0 Oct 2 19:54:25.956000 audit[2875]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0004857d0 a2=48 a3=c0004857c0 items=0 ppid=2702 pid=2875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c818 key=(null) Oct 2 19:54:25.956000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:54:26.458666 kubelet[2433]: E1002 19:54:26.458620 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:54:27.103957 kubelet[2433]: W1002 19:54:27.103900 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice/cri-containerd-0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345.scope WatchSource:0}: container "0d90d191195275058f8781ff097b8230cb9cfe64f9259ed8e306813eb9bf3345" in namespace "k8s.io": not found Oct 2 19:54:30.210976 kubelet[2433]: W1002 19:54:30.210914 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice/cri-containerd-02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d.scope WatchSource:0}: task 02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d not found: not found Oct 2 19:54:38.310307 env[1336]: time="2023-10-02T19:54:38.310246027Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:54:38.349871 env[1336]: time="2023-10-02T19:54:38.349817084Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\"" Oct 2 19:54:38.350807 env[1336]: time="2023-10-02T19:54:38.350772285Z" level=info msg="StartContainer for \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\"" Oct 2 19:54:38.374836 systemd[1]: Started cri-containerd-501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0.scope. Oct 2 19:54:38.390175 systemd[1]: cri-containerd-501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0.scope: Deactivated successfully. Oct 2 19:54:38.394362 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0-rootfs.mount: Deactivated successfully. Oct 2 19:54:38.904668 env[1336]: time="2023-10-02T19:54:38.904607790Z" level=info msg="shim disconnected" id=501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0 Oct 2 19:54:38.904668 env[1336]: time="2023-10-02T19:54:38.904662390Z" level=warning msg="cleaning up after shim disconnected" id=501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0 namespace=k8s.io Oct 2 19:54:38.904668 env[1336]: time="2023-10-02T19:54:38.904675990Z" level=info msg="cleaning up dead shim" Oct 2 19:54:38.913220 env[1336]: time="2023-10-02T19:54:38.913167302Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2920 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:38.913518 env[1336]: time="2023-10-02T19:54:38.913455403Z" level=error msg="copy shim log" error="read /proc/self/fd/98: file already closed" Oct 2 19:54:38.913776 env[1336]: time="2023-10-02T19:54:38.913732803Z" level=error msg="Failed to pipe stderr of container \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\"" error="reading from a closed fifo" Oct 2 19:54:38.914118 env[1336]: time="2023-10-02T19:54:38.914062304Z" level=error msg="Failed to pipe stdout of container \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\"" error="reading from a closed fifo" Oct 2 19:54:38.918124 env[1336]: time="2023-10-02T19:54:38.918079810Z" level=error msg="StartContainer for \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:38.918339 kubelet[2433]: E1002 19:54:38.918316 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0" Oct 2 19:54:38.918720 kubelet[2433]: E1002 19:54:38.918455 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:38.918720 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:38.918720 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 19:54:38.918720 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2zmk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:38.918720 kubelet[2433]: E1002 19:54:38.918511 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:54:39.488049 kubelet[2433]: I1002 19:54:39.488012 2433 scope.go:117] "RemoveContainer" containerID="02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d" Oct 2 19:54:39.488475 kubelet[2433]: I1002 19:54:39.488455 2433 scope.go:117] "RemoveContainer" containerID="02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d" Oct 2 19:54:39.490915 env[1336]: time="2023-10-02T19:54:39.490857636Z" level=info msg="RemoveContainer for \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\"" Oct 2 19:54:39.492861 env[1336]: time="2023-10-02T19:54:39.492116738Z" level=info msg="RemoveContainer for \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\"" Oct 2 19:54:39.493576 env[1336]: time="2023-10-02T19:54:39.493439140Z" level=error msg="RemoveContainer for \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\" failed" error="failed to set removing state for container \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\": container is already in removing state" Oct 2 19:54:39.495816 kubelet[2433]: E1002 19:54:39.495796 2433 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\": container is already in removing state" containerID="02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d" Oct 2 19:54:39.497131 kubelet[2433]: I1002 19:54:39.495972 2433 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d"} err="rpc error: code = Unknown desc = failed to set removing state for container \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\": container is already in removing state" Oct 2 19:54:39.503243 env[1336]: time="2023-10-02T19:54:39.503206054Z" level=info msg="RemoveContainer for \"02ab11e5569b491d8f4cda45336f66c1310e24d8316bc117e46df235bee8861d\" returns successfully" Oct 2 19:54:39.503804 kubelet[2433]: E1002 19:54:39.503780 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:54:39.507193 kubelet[2433]: I1002 19:54:39.507141 2433 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-6j278" podStartSLOduration=14.34654079 podCreationTimestamp="2023-10-02 19:54:11 +0000 UTC" firstStartedPulling="2023-10-02 19:54:11.567270223 +0000 UTC m=+13.382532318" lastFinishedPulling="2023-10-02 19:54:25.727788592 +0000 UTC m=+27.543050687" observedRunningTime="2023-10-02 19:54:26.568808657 +0000 UTC m=+28.384070752" watchObservedRunningTime="2023-10-02 19:54:39.507059159 +0000 UTC m=+41.322321254" Oct 2 19:54:42.010109 kubelet[2433]: W1002 19:54:42.010049 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice/cri-containerd-501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0.scope WatchSource:0}: task 501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0 not found: not found Oct 2 19:54:51.307136 kubelet[2433]: E1002 19:54:51.307041 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:54:54.097000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.102242 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:54:54.102358 kernel: audit: type=1400 audit(1696276494.097:1073): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.097000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.136433 kernel: audit: type=1400 audit(1696276494.097:1072): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.136534 kernel: audit: type=1300 audit(1696276494.097:1073): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cb2c90 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:54.097000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cb2c90 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:54.097000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:54.158644 kernel: audit: type=1327 audit(1696276494.097:1073): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:54.097000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00044c020 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:54.197606 kernel: audit: type=1300 audit(1696276494.097:1072): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00044c020 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:54.197747 kernel: audit: type=1327 audit(1696276494.097:1072): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:54.097000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:54.740000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.740000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006122de0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:54:54.758619 kernel: audit: type=1400 audit(1696276494.740:1074): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.758696 kernel: audit: type=1300 audit(1696276494.740:1074): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006122de0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:54:54.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:54.795324 kernel: audit: type=1327 audit(1696276494.740:1074): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:54.740000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.812530 kernel: audit: type=1400 audit(1696276494.740:1075): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.740000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0064005a0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:54:54.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:54.740000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.740000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006400780 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:54:54.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:54.777000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.777000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0075ee340 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:54:54.777000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:54.982000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.982000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0075ee620 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:54:54.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:54.982000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:54.982000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006400e10 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:54:54.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:57.138000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.138000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.138000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00044c820 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:57.138000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:57.138000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c53bc0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:57.138000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:57.138000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.138000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c53be0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:57.138000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:57.142000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.142000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000958140 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:54:57.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:06.309578 env[1336]: time="2023-10-02T19:55:06.309522710Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:55:06.343223 env[1336]: time="2023-10-02T19:55:06.343161699Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\"" Oct 2 19:55:06.344291 env[1336]: time="2023-10-02T19:55:06.344253834Z" level=info msg="StartContainer for \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\"" Oct 2 19:55:06.376655 systemd[1]: run-containerd-runc-k8s.io-8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9-runc.sF2Jkb.mount: Deactivated successfully. Oct 2 19:55:06.380218 systemd[1]: Started cri-containerd-8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9.scope. Oct 2 19:55:06.390721 systemd[1]: cri-containerd-8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9.scope: Deactivated successfully. Oct 2 19:55:06.438291 env[1336]: time="2023-10-02T19:55:06.438222078Z" level=info msg="shim disconnected" id=8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9 Oct 2 19:55:06.438630 env[1336]: time="2023-10-02T19:55:06.438604590Z" level=warning msg="cleaning up after shim disconnected" id=8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9 namespace=k8s.io Oct 2 19:55:06.438763 env[1336]: time="2023-10-02T19:55:06.438745695Z" level=info msg="cleaning up dead shim" Oct 2 19:55:06.447688 env[1336]: time="2023-10-02T19:55:06.447632782Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2960 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:06Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:06.448014 env[1336]: time="2023-10-02T19:55:06.447949593Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:55:06.448716 env[1336]: time="2023-10-02T19:55:06.448666316Z" level=error msg="Failed to pipe stderr of container \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\"" error="reading from a closed fifo" Oct 2 19:55:06.448793 env[1336]: time="2023-10-02T19:55:06.448725818Z" level=error msg="Failed to pipe stdout of container \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\"" error="reading from a closed fifo" Oct 2 19:55:06.452756 env[1336]: time="2023-10-02T19:55:06.452707847Z" level=error msg="StartContainer for \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:06.452998 kubelet[2433]: E1002 19:55:06.452975 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9" Oct 2 19:55:06.453444 kubelet[2433]: E1002 19:55:06.453118 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:06.453444 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:06.453444 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 19:55:06.453444 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2zmk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:06.453444 kubelet[2433]: E1002 19:55:06.453176 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:55:06.540924 kubelet[2433]: I1002 19:55:06.540890 2433 scope.go:117] "RemoveContainer" containerID="501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0" Oct 2 19:55:06.541912 kubelet[2433]: I1002 19:55:06.541892 2433 scope.go:117] "RemoveContainer" containerID="501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0" Oct 2 19:55:06.543111 env[1336]: time="2023-10-02T19:55:06.543057873Z" level=info msg="RemoveContainer for \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\"" Oct 2 19:55:06.543569 env[1336]: time="2023-10-02T19:55:06.543535188Z" level=info msg="RemoveContainer for \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\"" Oct 2 19:55:06.543672 env[1336]: time="2023-10-02T19:55:06.543641792Z" level=error msg="RemoveContainer for \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\" failed" error="failed to set removing state for container \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\": container is already in removing state" Oct 2 19:55:06.543835 kubelet[2433]: E1002 19:55:06.543818 2433 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\": container is already in removing state" containerID="501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0" Oct 2 19:55:06.543919 kubelet[2433]: E1002 19:55:06.543860 2433 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0": container is already in removing state; Skipping pod "cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)" Oct 2 19:55:06.544231 kubelet[2433]: E1002 19:55:06.544205 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:55:06.554147 env[1336]: time="2023-10-02T19:55:06.554108131Z" level=info msg="RemoveContainer for \"501e4f129f28bc64b176f8483ffac9ffe511f3fa26cdef659350008d1c96c0d0\" returns successfully" Oct 2 19:55:07.332460 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9-rootfs.mount: Deactivated successfully. Oct 2 19:55:09.543715 kubelet[2433]: W1002 19:55:09.543660 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice/cri-containerd-8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9.scope WatchSource:0}: task 8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9 not found: not found Oct 2 19:55:18.307617 kubelet[2433]: E1002 19:55:18.307562 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:55:29.306856 kubelet[2433]: E1002 19:55:29.306807 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:55:43.306613 kubelet[2433]: E1002 19:55:43.306540 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:55:54.097000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.102435 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:55:54.102562 kernel: audit: type=1400 audit(1696276554.097:1084): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.097000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014ff0b0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:54.142582 kernel: audit: type=1300 audit(1696276554.097:1084): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014ff0b0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:54.142731 kernel: audit: type=1327 audit(1696276554.097:1084): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:54.097000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:54.098000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.176208 kernel: audit: type=1400 audit(1696276554.098:1085): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.176348 kernel: audit: type=1300 audit(1696276554.098:1085): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5fcc0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:54.098000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5fcc0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:54.098000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:54.215434 kernel: audit: type=1327 audit(1696276554.098:1085): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:54.310775 env[1336]: time="2023-10-02T19:55:54.310721037Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:55:54.353911 env[1336]: time="2023-10-02T19:55:54.353767498Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\"" Oct 2 19:55:54.354808 env[1336]: time="2023-10-02T19:55:54.354770015Z" level=info msg="StartContainer for \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\"" Oct 2 19:55:54.383892 systemd[1]: Started cri-containerd-3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc.scope. Oct 2 19:55:54.394159 systemd[1]: cri-containerd-3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc.scope: Deactivated successfully. Oct 2 19:55:54.394473 systemd[1]: Stopped cri-containerd-3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc.scope. Oct 2 19:55:54.398221 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc-rootfs.mount: Deactivated successfully. Oct 2 19:55:54.421423 env[1336]: time="2023-10-02T19:55:54.421367991Z" level=info msg="shim disconnected" id=3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc Oct 2 19:55:54.421673 env[1336]: time="2023-10-02T19:55:54.421424992Z" level=warning msg="cleaning up after shim disconnected" id=3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc namespace=k8s.io Oct 2 19:55:54.421673 env[1336]: time="2023-10-02T19:55:54.421437193Z" level=info msg="cleaning up dead shim" Oct 2 19:55:54.432026 env[1336]: time="2023-10-02T19:55:54.431967178Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3001 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:54Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:54.432346 env[1336]: time="2023-10-02T19:55:54.432266184Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:55:54.432700 env[1336]: time="2023-10-02T19:55:54.432654191Z" level=error msg="Failed to pipe stderr of container \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\"" error="reading from a closed fifo" Oct 2 19:55:54.432801 env[1336]: time="2023-10-02T19:55:54.432702991Z" level=error msg="Failed to pipe stdout of container \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\"" error="reading from a closed fifo" Oct 2 19:55:54.437487 env[1336]: time="2023-10-02T19:55:54.437437875Z" level=error msg="StartContainer for \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:54.437717 kubelet[2433]: E1002 19:55:54.437695 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc" Oct 2 19:55:54.438086 kubelet[2433]: E1002 19:55:54.437827 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:54.438086 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:54.438086 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 19:55:54.438086 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2zmk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:54.438086 kubelet[2433]: E1002 19:55:54.437882 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:55:54.634815 kubelet[2433]: I1002 19:55:54.634681 2433 scope.go:117] "RemoveContainer" containerID="8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9" Oct 2 19:55:54.636306 kubelet[2433]: I1002 19:55:54.636205 2433 scope.go:117] "RemoveContainer" containerID="8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9" Oct 2 19:55:54.640438 env[1336]: time="2023-10-02T19:55:54.640381059Z" level=info msg="RemoveContainer for \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\"" Oct 2 19:55:54.643928 env[1336]: time="2023-10-02T19:55:54.643895321Z" level=info msg="RemoveContainer for \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\"" Oct 2 19:55:54.644283 env[1336]: time="2023-10-02T19:55:54.644247527Z" level=error msg="RemoveContainer for \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\" failed" error="failed to set removing state for container \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\": container is already in removing state" Oct 2 19:55:54.644605 kubelet[2433]: E1002 19:55:54.644545 2433 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\": container is already in removing state" containerID="8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9" Oct 2 19:55:54.646217 kubelet[2433]: E1002 19:55:54.644582 2433 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9": container is already in removing state; Skipping pod "cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)" Oct 2 19:55:54.646217 kubelet[2433]: E1002 19:55:54.645096 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:55:54.657787 env[1336]: time="2023-10-02T19:55:54.657750566Z" level=info msg="RemoveContainer for \"8f68ec51c2c997e4172c054645ef1f2ff6ef01a59b309c1a137c2f61b0ef81f9\" returns successfully" Oct 2 19:55:54.740000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.740000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.774124 kernel: audit: type=1400 audit(1696276554.740:1086): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.774278 kernel: audit: type=1400 audit(1696276554.740:1087): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.740000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00852b0b0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:55:54.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:54.812577 kernel: audit: type=1300 audit(1696276554.740:1087): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00852b0b0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:55:54.812710 kernel: audit: type=1327 audit(1696276554.740:1087): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:54.740000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00822d1d0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:55:54.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:54.740000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.740000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00822d200 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:55:54.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:54.777000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.777000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00b9feec0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:55:54.777000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:54.982000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.982000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00b5909a0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:55:54.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:54.982000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:54.982000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00852b320 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:55:54.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:57.138000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.138000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.138000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017462e0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:57.138000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:57.138000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f51440 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:57.138000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:57.139000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.139000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f51460 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:57.139000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:57.143000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.143000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f515e0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:55:57.143000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:57.527401 kubelet[2433]: W1002 19:55:57.527261 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice/cri-containerd-3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc.scope WatchSource:0}: task 3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc not found: not found Oct 2 19:55:58.390635 kubelet[2433]: E1002 19:55:58.390568 2433 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:55:58.521890 kubelet[2433]: E1002 19:55:58.521860 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:03.523398 kubelet[2433]: E1002 19:56:03.523365 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:05.306771 kubelet[2433]: E1002 19:56:05.306730 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:56:08.525336 kubelet[2433]: E1002 19:56:08.525291 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:13.527065 kubelet[2433]: E1002 19:56:13.527010 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:16.307389 kubelet[2433]: E1002 19:56:16.307339 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:56:18.528772 kubelet[2433]: E1002 19:56:18.528656 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:23.530104 kubelet[2433]: E1002 19:56:23.530066 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:26.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.19:22-10.200.12.6:38252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:26.055107 systemd[1]: Started sshd@7-10.200.8.19:22-10.200.12.6:38252.service. Oct 2 19:56:26.060971 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:56:26.061086 kernel: audit: type=1130 audit(1696276586.053:1096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.19:22-10.200.12.6:38252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:26.675000 audit[3018]: USER_ACCT pid=3018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:26.677611 sshd[3018]: Accepted publickey for core from 10.200.12.6 port 38252 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:26.695000 audit[3018]: CRED_ACQ pid=3018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:26.698015 sshd[3018]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:26.703445 systemd[1]: Started session-10.scope. Oct 2 19:56:26.705906 systemd-logind[1317]: New session 10 of user core. Oct 2 19:56:26.714994 kernel: audit: type=1101 audit(1696276586.675:1097): pid=3018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:26.715102 kernel: audit: type=1103 audit(1696276586.695:1098): pid=3018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:26.715606 kernel: audit: type=1006 audit(1696276586.696:1099): pid=3018 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:56:26.696000 audit[3018]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8f3552a0 a2=3 a3=0 items=0 ppid=1 pid=3018 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:26.726633 kernel: audit: type=1300 audit(1696276586.696:1099): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8f3552a0 a2=3 a3=0 items=0 ppid=1 pid=3018 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:26.743730 kernel: audit: type=1327 audit(1696276586.696:1099): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:26.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:26.710000 audit[3018]: USER_START pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:26.749605 kernel: audit: type=1105 audit(1696276586.710:1100): pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:26.712000 audit[3020]: CRED_ACQ pid=3020 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:26.767684 kernel: audit: type=1103 audit(1696276586.712:1101): pid=3020 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:27.238732 sshd[3018]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:27.238000 audit[3018]: USER_END pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:27.242626 systemd[1]: sshd@7-10.200.8.19:22-10.200.12.6:38252.service: Deactivated successfully. Oct 2 19:56:27.243600 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:56:27.245196 systemd-logind[1317]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:56:27.246309 systemd-logind[1317]: Removed session 10. Oct 2 19:56:27.238000 audit[3018]: CRED_DISP pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:27.275844 kernel: audit: type=1106 audit(1696276587.238:1102): pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:27.275953 kernel: audit: type=1104 audit(1696276587.238:1103): pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:27.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.19:22-10.200.12.6:38252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:28.531951 kubelet[2433]: E1002 19:56:28.531911 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:31.306341 kubelet[2433]: E1002 19:56:31.306293 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:56:33.533103 kubelet[2433]: E1002 19:56:33.533057 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:37.347128 systemd[1]: Started sshd@8-10.200.8.19:22-10.200.12.6:36426.service. Oct 2 19:56:37.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.19:22-10.200.12.6:36426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:37.352557 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:37.352645 kernel: audit: type=1130 audit(1696276597.346:1105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.19:22-10.200.12.6:36426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:38.055000 audit[3031]: USER_ACCT pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.077328 sshd[3031]: Accepted publickey for core from 10.200.12.6 port 36426 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:38.077713 kernel: audit: type=1101 audit(1696276598.055:1106): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.078719 sshd[3031]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:38.076000 audit[3031]: CRED_ACQ pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.087852 systemd[1]: Started session-11.scope. Oct 2 19:56:38.088989 systemd-logind[1317]: New session 11 of user core. Oct 2 19:56:38.107598 kernel: audit: type=1103 audit(1696276598.076:1107): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.107720 kernel: audit: type=1006 audit(1696276598.076:1108): pid=3031 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:56:38.107752 kernel: audit: type=1300 audit(1696276598.076:1108): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff30b45210 a2=3 a3=0 items=0 ppid=1 pid=3031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:38.076000 audit[3031]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff30b45210 a2=3 a3=0 items=0 ppid=1 pid=3031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:38.076000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:38.125609 kernel: audit: type=1327 audit(1696276598.076:1108): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:38.093000 audit[3031]: USER_START pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.131616 kernel: audit: type=1105 audit(1696276598.093:1109): pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.095000 audit[3033]: CRED_ACQ pid=3033 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.147610 kernel: audit: type=1103 audit(1696276598.095:1110): pid=3033 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.535062 kubelet[2433]: E1002 19:56:38.534929 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:38.557859 sshd[3031]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:38.557000 audit[3031]: USER_END pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.561096 systemd-logind[1317]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:56:38.562322 systemd[1]: sshd@8-10.200.8.19:22-10.200.12.6:36426.service: Deactivated successfully. Oct 2 19:56:38.563102 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:56:38.564352 systemd-logind[1317]: Removed session 11. Oct 2 19:56:38.557000 audit[3031]: CRED_DISP pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.596133 kernel: audit: type=1106 audit(1696276598.557:1111): pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.596252 kernel: audit: type=1104 audit(1696276598.557:1112): pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:38.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.19:22-10.200.12.6:36426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:43.536036 kubelet[2433]: E1002 19:56:43.535996 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:44.307119 kubelet[2433]: E1002 19:56:44.307066 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:56:48.536915 kubelet[2433]: E1002 19:56:48.536854 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:48.940875 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:48.940992 kernel: audit: type=1130 audit(1696276608.687:1114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.19:22-10.200.12.6:35958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:48.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.19:22-10.200.12.6:35958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:48.687445 systemd[1]: Started sshd@9-10.200.8.19:22-10.200.12.6:35958.service. Oct 2 19:56:49.309000 audit[3048]: USER_ACCT pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.310277 sshd[3048]: Accepted publickey for core from 10.200.12.6 port 35958 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:49.328000 audit[3048]: CRED_ACQ pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.329366 sshd[3048]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:49.340930 systemd[1]: Started session-12.scope. Oct 2 19:56:49.342687 systemd-logind[1317]: New session 12 of user core. Oct 2 19:56:49.347242 kernel: audit: type=1101 audit(1696276609.309:1115): pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.347342 kernel: audit: type=1103 audit(1696276609.328:1116): pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.328000 audit[3048]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda56171b0 a2=3 a3=0 items=0 ppid=1 pid=3048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:49.378920 kernel: audit: type=1006 audit(1696276609.328:1117): pid=3048 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:56:49.379026 kernel: audit: type=1300 audit(1696276609.328:1117): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda56171b0 a2=3 a3=0 items=0 ppid=1 pid=3048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:49.379060 kernel: audit: type=1327 audit(1696276609.328:1117): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:49.328000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:49.349000 audit[3048]: USER_START pid=3048 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.402989 kernel: audit: type=1105 audit(1696276609.349:1118): pid=3048 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.354000 audit[3053]: CRED_ACQ pid=3053 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.419111 kernel: audit: type=1103 audit(1696276609.354:1119): pid=3053 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.815223 sshd[3048]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:49.816000 audit[3048]: USER_END pid=3048 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.819171 systemd[1]: sshd@9-10.200.8.19:22-10.200.12.6:35958.service: Deactivated successfully. Oct 2 19:56:49.820147 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:56:49.821987 systemd-logind[1317]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:56:49.823276 systemd-logind[1317]: Removed session 12. Oct 2 19:56:49.816000 audit[3048]: CRED_DISP pid=3048 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.853030 kernel: audit: type=1106 audit(1696276609.816:1120): pid=3048 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.853133 kernel: audit: type=1104 audit(1696276609.816:1121): pid=3048 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:49.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.19:22-10.200.12.6:35958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:53.538781 kubelet[2433]: E1002 19:56:53.538736 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:54.099000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.104280 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:54.104401 kernel: audit: type=1400 audit(1696276614.099:1123): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.099000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.138272 kernel: audit: type=1400 audit(1696276614.099:1124): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.138388 kernel: audit: type=1300 audit(1696276614.099:1124): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ad6c20 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:54.099000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ad6c20 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:54.160248 kernel: audit: type=1327 audit(1696276614.099:1124): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:54.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:54.099000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cb2750 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:54.197513 kernel: audit: type=1300 audit(1696276614.099:1123): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cb2750 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:54.197631 kernel: audit: type=1327 audit(1696276614.099:1123): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:54.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:54.740000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.741000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.775365 kernel: audit: type=1400 audit(1696276614.740:1125): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.775507 kernel: audit: type=1400 audit(1696276614.741:1126): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.775532 kernel: audit: type=1300 audit(1696276614.741:1126): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0073358f0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:56:54.741000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0073358f0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:56:54.741000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:54.813152 kernel: audit: type=1327 audit(1696276614.741:1126): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:54.741000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.741000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007335950 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:56:54.741000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:54.740000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0073adbc0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:56:54.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:54.778000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.778000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0084d4660 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:56:54.778000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:54.983000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.983000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:54.983000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007335aa0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:56:54.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:54.983000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0084d48c0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:56:54.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:57.139000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:57.139000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000452420 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:57.139000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:57.140000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:57.140000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:57.140000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ad6e60 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:57.140000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:57.140000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000452460 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:57.140000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:57.144000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:57.144000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000452fe0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:56:57.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:57.306775 kubelet[2433]: E1002 19:56:57.306725 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:56:58.539442 kubelet[2433]: E1002 19:56:58.539404 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:59.943346 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:56:59.943513 kernel: audit: type=1130 audit(1696276619.920:1135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.19:22-10.200.12.6:38944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:59.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.19:22-10.200.12.6:38944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:59.920954 systemd[1]: Started sshd@10-10.200.8.19:22-10.200.12.6:38944.service. Oct 2 19:57:00.544000 audit[3066]: USER_ACCT pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:00.546674 sshd[3066]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:00.564792 kernel: audit: type=1101 audit(1696276620.544:1136): pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:00.564853 sshd[3066]: Accepted publickey for core from 10.200.12.6 port 38944 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:00.545000 audit[3066]: CRED_ACQ pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:00.569876 systemd[1]: Started session-13.scope. Oct 2 19:57:00.571033 systemd-logind[1317]: New session 13 of user core. Oct 2 19:57:00.584978 kernel: audit: type=1103 audit(1696276620.545:1137): pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:00.585051 kernel: audit: type=1006 audit(1696276620.545:1138): pid=3066 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:57:00.594847 kernel: audit: type=1300 audit(1696276620.545:1138): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe853c410 a2=3 a3=0 items=0 ppid=1 pid=3066 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:00.545000 audit[3066]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe853c410 a2=3 a3=0 items=0 ppid=1 pid=3066 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:00.545000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:00.577000 audit[3066]: USER_START pid=3066 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:00.637071 kernel: audit: type=1327 audit(1696276620.545:1138): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:00.637154 kernel: audit: type=1105 audit(1696276620.577:1139): pid=3066 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:00.637178 kernel: audit: type=1103 audit(1696276620.583:1140): pid=3068 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:00.583000 audit[3068]: CRED_ACQ pid=3068 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:01.043427 sshd[3066]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:01.044000 audit[3066]: USER_END pid=3066 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:01.046806 systemd[1]: sshd@10-10.200.8.19:22-10.200.12.6:38944.service: Deactivated successfully. Oct 2 19:57:01.047643 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:57:01.049280 systemd-logind[1317]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:57:01.050258 systemd-logind[1317]: Removed session 13. Oct 2 19:57:01.044000 audit[3066]: CRED_DISP pid=3066 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:01.079857 kernel: audit: type=1106 audit(1696276621.044:1141): pid=3066 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:01.079950 kernel: audit: type=1104 audit(1696276621.044:1142): pid=3066 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:01.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.19:22-10.200.12.6:38944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:03.541038 kubelet[2433]: E1002 19:57:03.540996 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:08.542681 kubelet[2433]: E1002 19:57:08.542637 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:11.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.19:22-10.200.12.6:49468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:11.149064 systemd[1]: Started sshd@11-10.200.8.19:22-10.200.12.6:49468.service. Oct 2 19:57:11.154282 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:11.154368 kernel: audit: type=1130 audit(1696276631.148:1144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.19:22-10.200.12.6:49468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:11.766000 audit[3082]: USER_ACCT pid=3082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:11.787004 sshd[3082]: Accepted publickey for core from 10.200.12.6 port 49468 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:11.787766 kernel: audit: type=1101 audit(1696276631.766:1145): pid=3082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:11.787428 sshd[3082]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:11.786000 audit[3082]: CRED_ACQ pid=3082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:11.793070 systemd[1]: Started session-14.scope. Oct 2 19:57:11.794211 systemd-logind[1317]: New session 14 of user core. Oct 2 19:57:11.805617 kernel: audit: type=1103 audit(1696276631.786:1146): pid=3082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:11.805691 kernel: audit: type=1006 audit(1696276631.786:1147): pid=3082 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:57:11.786000 audit[3082]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff43c88090 a2=3 a3=0 items=0 ppid=1 pid=3082 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:11.815696 kernel: audit: type=1300 audit(1696276631.786:1147): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff43c88090 a2=3 a3=0 items=0 ppid=1 pid=3082 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:11.833209 kernel: audit: type=1327 audit(1696276631.786:1147): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:11.786000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:11.838720 kernel: audit: type=1105 audit(1696276631.799:1148): pid=3082 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:11.799000 audit[3082]: USER_START pid=3082 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:11.802000 audit[3086]: CRED_ACQ pid=3086 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:11.857611 kernel: audit: type=1103 audit(1696276631.802:1149): pid=3086 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:12.262000 audit[3082]: USER_END pid=3082 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:12.262256 sshd[3082]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:12.266180 systemd[1]: sshd@11-10.200.8.19:22-10.200.12.6:49468.service: Deactivated successfully. Oct 2 19:57:12.266985 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:57:12.268325 systemd-logind[1317]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:57:12.269221 systemd-logind[1317]: Removed session 14. Oct 2 19:57:12.282674 kernel: audit: type=1106 audit(1696276632.262:1150): pid=3082 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:12.282782 kernel: audit: type=1104 audit(1696276632.262:1151): pid=3082 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:12.262000 audit[3082]: CRED_DISP pid=3082 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:12.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.19:22-10.200.12.6:49468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:12.306730 kubelet[2433]: E1002 19:57:12.306701 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:57:13.543968 kubelet[2433]: E1002 19:57:13.543926 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:18.545822 kubelet[2433]: E1002 19:57:18.545784 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:22.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.19:22-10.200.12.6:33382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:22.370070 systemd[1]: Started sshd@12-10.200.8.19:22-10.200.12.6:33382.service. Oct 2 19:57:22.375333 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:22.375429 kernel: audit: type=1130 audit(1696276642.369:1153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.19:22-10.200.12.6:33382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:23.020000 audit[3099]: USER_ACCT pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.039674 kernel: audit: type=1101 audit(1696276643.020:1154): pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.039733 sshd[3099]: Accepted publickey for core from 10.200.12.6 port 33382 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:23.038000 audit[3099]: CRED_ACQ pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.040318 sshd[3099]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:23.046037 systemd[1]: Started session-15.scope. Oct 2 19:57:23.047163 systemd-logind[1317]: New session 15 of user core. Oct 2 19:57:23.057635 kernel: audit: type=1103 audit(1696276643.038:1155): pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.057740 kernel: audit: type=1006 audit(1696276643.039:1156): pid=3099 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:57:23.039000 audit[3099]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7bd77130 a2=3 a3=0 items=0 ppid=1 pid=3099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:23.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:23.092433 kernel: audit: type=1300 audit(1696276643.039:1156): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7bd77130 a2=3 a3=0 items=0 ppid=1 pid=3099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:23.092532 kernel: audit: type=1327 audit(1696276643.039:1156): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:23.092557 kernel: audit: type=1105 audit(1696276643.052:1157): pid=3099 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.052000 audit[3099]: USER_START pid=3099 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.055000 audit[3101]: CRED_ACQ pid=3101 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.126073 kernel: audit: type=1103 audit(1696276643.055:1158): pid=3101 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.538518 sshd[3099]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:23.539000 audit[3099]: USER_END pid=3099 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.542082 systemd[1]: sshd@12-10.200.8.19:22-10.200.12.6:33382.service: Deactivated successfully. Oct 2 19:57:23.543053 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:57:23.545100 systemd-logind[1317]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:57:23.546184 systemd-logind[1317]: Removed session 15. Oct 2 19:57:23.539000 audit[3099]: CRED_DISP pid=3099 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.560154 kubelet[2433]: E1002 19:57:23.560134 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:23.576891 kernel: audit: type=1106 audit(1696276643.539:1159): pid=3099 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.576997 kernel: audit: type=1104 audit(1696276643.539:1160): pid=3099 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:23.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.19:22-10.200.12.6:33382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:27.308818 env[1336]: time="2023-10-02T19:57:27.308755805Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:57:27.341076 env[1336]: time="2023-10-02T19:57:27.341021852Z" level=info msg="CreateContainer within sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\"" Oct 2 19:57:27.341815 env[1336]: time="2023-10-02T19:57:27.341778058Z" level=info msg="StartContainer for \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\"" Oct 2 19:57:27.365179 systemd[1]: Started cri-containerd-71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55.scope. Oct 2 19:57:27.376706 systemd[1]: cri-containerd-71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55.scope: Deactivated successfully. Oct 2 19:57:27.383855 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55-rootfs.mount: Deactivated successfully. Oct 2 19:57:27.453458 env[1336]: time="2023-10-02T19:57:27.453393510Z" level=info msg="shim disconnected" id=71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55 Oct 2 19:57:27.453458 env[1336]: time="2023-10-02T19:57:27.453454810Z" level=warning msg="cleaning up after shim disconnected" id=71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55 namespace=k8s.io Oct 2 19:57:27.453458 env[1336]: time="2023-10-02T19:57:27.453465710Z" level=info msg="cleaning up dead shim" Oct 2 19:57:27.462079 env[1336]: time="2023-10-02T19:57:27.462031076Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:57:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3137 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:57:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:57:27.462540 env[1336]: time="2023-10-02T19:57:27.462471279Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:57:27.462830 env[1336]: time="2023-10-02T19:57:27.462779282Z" level=error msg="Failed to pipe stderr of container \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\"" error="reading from a closed fifo" Oct 2 19:57:27.464788 env[1336]: time="2023-10-02T19:57:27.464740296Z" level=error msg="Failed to pipe stdout of container \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\"" error="reading from a closed fifo" Oct 2 19:57:27.469145 env[1336]: time="2023-10-02T19:57:27.469102230Z" level=error msg="StartContainer for \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:57:27.469448 kubelet[2433]: E1002 19:57:27.469422 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55" Oct 2 19:57:27.469886 kubelet[2433]: E1002 19:57:27.469578 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:57:27.469886 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:57:27.469886 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 19:57:27.469886 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2zmk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:57:27.469886 kubelet[2433]: E1002 19:57:27.469655 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:57:27.836350 kubelet[2433]: I1002 19:57:27.836315 2433 scope.go:117] "RemoveContainer" containerID="3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc" Oct 2 19:57:27.837076 kubelet[2433]: I1002 19:57:27.837044 2433 scope.go:117] "RemoveContainer" containerID="3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc" Oct 2 19:57:27.838231 env[1336]: time="2023-10-02T19:57:27.838196948Z" level=info msg="RemoveContainer for \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\"" Oct 2 19:57:27.838757 env[1336]: time="2023-10-02T19:57:27.838724652Z" level=info msg="RemoveContainer for \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\"" Oct 2 19:57:27.838868 env[1336]: time="2023-10-02T19:57:27.838822053Z" level=error msg="RemoveContainer for \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\" failed" error="failed to set removing state for container \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\": container is already in removing state" Oct 2 19:57:27.839014 kubelet[2433]: E1002 19:57:27.838983 2433 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\": container is already in removing state" containerID="3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc" Oct 2 19:57:27.839096 kubelet[2433]: E1002 19:57:27.839024 2433 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc": container is already in removing state; Skipping pod "cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)" Oct 2 19:57:27.839394 kubelet[2433]: E1002 19:57:27.839318 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:57:27.856336 env[1336]: time="2023-10-02T19:57:27.856286486Z" level=info msg="RemoveContainer for \"3c0ccab5e5bb53bb7b0ebdc33fc8e1e09bcbd0aae23c52590e621ec10d0a5adc\" returns successfully" Oct 2 19:57:28.561718 kubelet[2433]: E1002 19:57:28.561678 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:30.559687 kubelet[2433]: W1002 19:57:30.559627 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice/cri-containerd-71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55.scope WatchSource:0}: task 71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55 not found: not found Oct 2 19:57:33.563017 kubelet[2433]: E1002 19:57:33.562967 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:33.668036 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:33.668239 kernel: audit: type=1130 audit(1696276653.645:1162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.19:22-10.200.12.6:38086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:33.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.19:22-10.200.12.6:38086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:33.646039 systemd[1]: Started sshd@13-10.200.8.19:22-10.200.12.6:38086.service. Oct 2 19:57:34.276000 audit[3150]: USER_ACCT pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.277201 sshd[3150]: Accepted publickey for core from 10.200.12.6 port 38086 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:34.296727 kernel: audit: type=1101 audit(1696276654.276:1163): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.296000 audit[3150]: CRED_ACQ pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.297601 sshd[3150]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:34.303336 systemd[1]: Started session-16.scope. Oct 2 19:57:34.304208 systemd-logind[1317]: New session 16 of user core. Oct 2 19:57:34.315612 kernel: audit: type=1103 audit(1696276654.296:1164): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.296000 audit[3150]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd79a42a20 a2=3 a3=0 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:34.344405 kernel: audit: type=1006 audit(1696276654.296:1165): pid=3150 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:57:34.344556 kernel: audit: type=1300 audit(1696276654.296:1165): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd79a42a20 a2=3 a3=0 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:34.296000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:34.312000 audit[3150]: USER_START pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.369442 kernel: audit: type=1327 audit(1696276654.296:1165): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:34.369537 kernel: audit: type=1105 audit(1696276654.312:1166): pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.369566 kernel: audit: type=1103 audit(1696276654.326:1167): pid=3152 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.326000 audit[3152]: CRED_ACQ pid=3152 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.805435 sshd[3150]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:34.806000 audit[3150]: USER_END pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.809042 systemd[1]: sshd@13-10.200.8.19:22-10.200.12.6:38086.service: Deactivated successfully. Oct 2 19:57:34.810032 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:57:34.812137 systemd-logind[1317]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:57:34.813381 systemd-logind[1317]: Removed session 16. Oct 2 19:57:34.806000 audit[3150]: CRED_DISP pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.843072 kernel: audit: type=1106 audit(1696276654.806:1168): pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.843212 kernel: audit: type=1104 audit(1696276654.806:1169): pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:34.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.19:22-10.200.12.6:38086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:38.564194 kubelet[2433]: E1002 19:57:38.564148 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:42.307003 kubelet[2433]: E1002 19:57:42.306960 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:57:43.565189 kubelet[2433]: E1002 19:57:43.565144 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:44.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.19:22-10.200.12.6:50832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:44.912697 systemd[1]: Started sshd@14-10.200.8.19:22-10.200.12.6:50832.service. Oct 2 19:57:44.917895 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:44.917990 kernel: audit: type=1130 audit(1696276664.912:1171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.19:22-10.200.12.6:50832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:45.650000 audit[3168]: USER_ACCT pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:45.651526 sshd[3168]: Accepted publickey for core from 10.200.12.6 port 50832 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:45.672067 kernel: audit: type=1101 audit(1696276665.650:1172): pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:45.672094 sshd[3168]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:45.670000 audit[3168]: CRED_ACQ pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:45.677668 systemd[1]: Started session-17.scope. Oct 2 19:57:45.678923 systemd-logind[1317]: New session 17 of user core. Oct 2 19:57:45.699218 kernel: audit: type=1103 audit(1696276665.670:1173): pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:45.699314 kernel: audit: type=1006 audit(1696276665.670:1174): pid=3168 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:57:45.699338 kernel: audit: type=1300 audit(1696276665.670:1174): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1373eb90 a2=3 a3=0 items=0 ppid=1 pid=3168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:45.670000 audit[3168]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1373eb90 a2=3 a3=0 items=0 ppid=1 pid=3168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:45.670000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:45.722313 kernel: audit: type=1327 audit(1696276665.670:1174): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:45.722393 kernel: audit: type=1105 audit(1696276665.681:1175): pid=3168 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:45.681000 audit[3168]: USER_START pid=3168 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:45.741689 kernel: audit: type=1103 audit(1696276665.686:1176): pid=3170 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:45.686000 audit[3170]: CRED_ACQ pid=3170 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:46.314974 sshd[3168]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:46.315000 audit[3168]: USER_END pid=3168 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:46.323949 systemd[1]: sshd@14-10.200.8.19:22-10.200.12.6:50832.service: Deactivated successfully. Oct 2 19:57:46.324794 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:57:46.326108 systemd-logind[1317]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:57:46.327068 systemd-logind[1317]: Removed session 17. Oct 2 19:57:46.316000 audit[3168]: CRED_DISP pid=3168 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:46.351645 kernel: audit: type=1106 audit(1696276666.315:1177): pid=3168 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:46.351778 kernel: audit: type=1104 audit(1696276666.316:1178): pid=3168 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:46.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.19:22-10.200.12.6:50832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:48.566284 kubelet[2433]: E1002 19:57:48.566167 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:53.568069 kubelet[2433]: E1002 19:57:53.568019 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:54.099000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.105088 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:54.105248 kernel: audit: type=1400 audit(1696276674.099:1181): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.099000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.138755 kernel: audit: type=1400 audit(1696276674.099:1180): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.099000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016d8210 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:54.160755 kernel: audit: type=1300 audit(1696276674.099:1181): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016d8210 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:54.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:54.161614 kernel: audit: type=1327 audit(1696276674.099:1181): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:54.099000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f50120 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:54.201128 kernel: audit: type=1300 audit(1696276674.099:1180): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f50120 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:54.201295 kernel: audit: type=1327 audit(1696276674.099:1180): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:54.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:54.742000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.742000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.778624 kernel: audit: type=1400 audit(1696276674.742:1183): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.778837 kernel: audit: type=1400 audit(1696276674.742:1182): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.778864 kernel: audit: type=1300 audit(1696276674.742:1182): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0067476b0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.742000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0067476b0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.742000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c002e73a70 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.820161 kernel: audit: type=1300 audit(1696276674.742:1183): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c002e73a70 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:54.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:54.742000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.742000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c002e73c50 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:54.778000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.778000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c006eaace0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.778000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:54.982000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.982000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c000bca270 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:54.983000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:54.983000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00643c7e0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:57:54.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:56.307243 kubelet[2433]: E1002 19:57:56.307192 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:57:56.422107 systemd[1]: Started sshd@15-10.200.8.19:22-10.200.12.6:45258.service. Oct 2 19:57:56.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.19:22-10.200.12.6:45258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:57.047000 audit[3181]: USER_ACCT pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.048018 sshd[3181]: Accepted publickey for core from 10.200.12.6 port 45258 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:57.048000 audit[3181]: CRED_ACQ pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.048000 audit[3181]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc24a7bc60 a2=3 a3=0 items=0 ppid=1 pid=3181 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:57.048000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:57.049736 sshd[3181]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:57.055166 systemd[1]: Started session-18.scope. Oct 2 19:57:57.055650 systemd-logind[1317]: New session 18 of user core. Oct 2 19:57:57.061000 audit[3181]: USER_START pid=3181 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.065000 audit[3183]: CRED_ACQ pid=3183 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.140000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.140000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.140000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f502a0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:57.140000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:57.140000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e5e380 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:57.140000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:57.142000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.142000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5e740 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:57.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:57.144000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.144000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5e8a0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:57:57.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:57.579825 sshd[3181]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:57.580000 audit[3181]: USER_END pid=3181 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.580000 audit[3181]: CRED_DISP pid=3181 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.583433 systemd[1]: sshd@15-10.200.8.19:22-10.200.12.6:45258.service: Deactivated successfully. Oct 2 19:57:57.584477 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:57:57.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.19:22-10.200.12.6:45258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:57.585368 systemd-logind[1317]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:57:57.586190 systemd-logind[1317]: Removed session 18. Oct 2 19:57:58.569117 kubelet[2433]: E1002 19:57:58.569070 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:03.570495 kubelet[2433]: E1002 19:58:03.570456 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:07.697186 systemd[1]: Started sshd@16-10.200.8.19:22-10.200.12.6:52148.service. Oct 2 19:58:07.722032 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 19:58:07.722190 kernel: audit: type=1130 audit(1696276687.696:1201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.19:22-10.200.12.6:52148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:07.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.19:22-10.200.12.6:52148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:08.469000 audit[3197]: USER_ACCT pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.471689 sshd[3197]: Accepted publickey for core from 10.200.12.6 port 52148 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:08.489000 audit[3197]: CRED_ACQ pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.491505 sshd[3197]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:08.497051 systemd[1]: Started session-19.scope. Oct 2 19:58:08.498270 systemd-logind[1317]: New session 19 of user core. Oct 2 19:58:08.509707 kernel: audit: type=1101 audit(1696276688.469:1202): pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.509885 kernel: audit: type=1103 audit(1696276688.489:1203): pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.520715 kernel: audit: type=1006 audit(1696276688.489:1204): pid=3197 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 19:58:08.520860 kernel: audit: type=1300 audit(1696276688.489:1204): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7cc96480 a2=3 a3=0 items=0 ppid=1 pid=3197 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:08.489000 audit[3197]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7cc96480 a2=3 a3=0 items=0 ppid=1 pid=3197 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:08.489000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:08.509000 audit[3197]: USER_START pid=3197 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.561936 kernel: audit: type=1327 audit(1696276688.489:1204): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:08.562066 kernel: audit: type=1105 audit(1696276688.509:1205): pid=3197 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.562104 kernel: audit: type=1103 audit(1696276688.517:1206): pid=3199 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.517000 audit[3199]: CRED_ACQ pid=3199 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.574985 kubelet[2433]: E1002 19:58:08.574959 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:08.974254 sshd[3197]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:08.974000 audit[3197]: USER_END pid=3197 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.978302 systemd-logind[1317]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:58:08.980095 systemd[1]: sshd@16-10.200.8.19:22-10.200.12.6:52148.service: Deactivated successfully. Oct 2 19:58:08.981126 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:58:08.982818 systemd-logind[1317]: Removed session 19. Oct 2 19:58:08.974000 audit[3197]: CRED_DISP pid=3197 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.010867 kernel: audit: type=1106 audit(1696276688.974:1207): pid=3197 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.011004 kernel: audit: type=1104 audit(1696276688.974:1208): pid=3197 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:08.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.19:22-10.200.12.6:52148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:09.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.19:22-10.200.12.6:52158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:09.078744 systemd[1]: Started sshd@17-10.200.8.19:22-10.200.12.6:52158.service. Oct 2 19:58:09.306265 kubelet[2433]: E1002 19:58:09.306221 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:58:09.693000 audit[3211]: USER_ACCT pid=3211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.695270 sshd[3211]: Accepted publickey for core from 10.200.12.6 port 52158 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:09.694000 audit[3211]: CRED_ACQ pid=3211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.695000 audit[3211]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5432bf20 a2=3 a3=0 items=0 ppid=1 pid=3211 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:09.695000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:09.697113 sshd[3211]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:09.702714 systemd[1]: Started session-20.scope. Oct 2 19:58:09.703163 systemd-logind[1317]: New session 20 of user core. Oct 2 19:58:09.706000 audit[3211]: USER_START pid=3211 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.707000 audit[3213]: CRED_ACQ pid=3213 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.881503 sshd[3211]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:10.882000 audit[3211]: USER_END pid=3211 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.882000 audit[3211]: CRED_DISP pid=3211 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.885503 systemd[1]: sshd@17-10.200.8.19:22-10.200.12.6:52158.service: Deactivated successfully. Oct 2 19:58:10.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.19:22-10.200.12.6:52158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:10.886655 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:58:10.887369 systemd-logind[1317]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:58:10.888238 systemd-logind[1317]: Removed session 20. Oct 2 19:58:10.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.19:22-10.200.12.6:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:10.986122 systemd[1]: Started sshd@18-10.200.8.19:22-10.200.12.6:52174.service. Oct 2 19:58:11.605000 audit[3221]: USER_ACCT pid=3221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:11.606983 sshd[3221]: Accepted publickey for core from 10.200.12.6 port 52174 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:11.606000 audit[3221]: CRED_ACQ pid=3221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:11.606000 audit[3221]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe301b6410 a2=3 a3=0 items=0 ppid=1 pid=3221 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:11.606000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:11.608614 sshd[3221]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:11.614260 systemd[1]: Started session-21.scope. Oct 2 19:58:11.614890 systemd-logind[1317]: New session 21 of user core. Oct 2 19:58:11.617000 audit[3221]: USER_START pid=3221 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:11.619000 audit[3225]: CRED_ACQ pid=3225 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:12.111144 sshd[3221]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:12.111000 audit[3221]: USER_END pid=3221 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:12.111000 audit[3221]: CRED_DISP pid=3221 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:12.114944 systemd[1]: sshd@18-10.200.8.19:22-10.200.12.6:52174.service: Deactivated successfully. Oct 2 19:58:12.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.19:22-10.200.12.6:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:12.116146 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:58:12.116957 systemd-logind[1317]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:58:12.117974 systemd-logind[1317]: Removed session 21. Oct 2 19:58:13.577111 kubelet[2433]: E1002 19:58:13.577061 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:18.577900 kubelet[2433]: E1002 19:58:18.577857 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:22.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.19:22-10.200.12.6:55722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:22.222083 systemd[1]: Started sshd@19-10.200.8.19:22-10.200.12.6:55722.service. Oct 2 19:58:22.234654 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:58:22.234764 kernel: audit: type=1130 audit(1696276702.220:1228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.19:22-10.200.12.6:55722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:22.846000 audit[3235]: USER_ACCT pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:22.848855 sshd[3235]: Accepted publickey for core from 10.200.12.6 port 55722 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:22.867708 kernel: audit: type=1101 audit(1696276702.846:1229): pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:22.866000 audit[3235]: CRED_ACQ pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:22.868051 sshd[3235]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:22.873539 systemd[1]: Started session-22.scope. Oct 2 19:58:22.874928 systemd-logind[1317]: New session 22 of user core. Oct 2 19:58:22.896780 kernel: audit: type=1103 audit(1696276702.866:1230): pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:22.896894 kernel: audit: type=1006 audit(1696276702.866:1231): pid=3235 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:58:22.896924 kernel: audit: type=1300 audit(1696276702.866:1231): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffccbfcc0 a2=3 a3=0 items=0 ppid=1 pid=3235 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:22.866000 audit[3235]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffccbfcc0 a2=3 a3=0 items=0 ppid=1 pid=3235 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:22.866000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:22.920095 kernel: audit: type=1327 audit(1696276702.866:1231): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:22.920188 kernel: audit: type=1105 audit(1696276702.877:1232): pid=3235 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:22.877000 audit[3235]: USER_START pid=3235 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:22.877000 audit[3237]: CRED_ACQ pid=3237 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:22.953372 kernel: audit: type=1103 audit(1696276702.877:1233): pid=3237 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:23.367367 sshd[3235]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:23.367000 audit[3235]: USER_END pid=3235 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:23.371881 systemd[1]: sshd@19-10.200.8.19:22-10.200.12.6:55722.service: Deactivated successfully. Oct 2 19:58:23.372886 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:58:23.374448 systemd-logind[1317]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:58:23.375413 systemd-logind[1317]: Removed session 22. Oct 2 19:58:23.367000 audit[3235]: CRED_DISP pid=3235 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:23.402771 kernel: audit: type=1106 audit(1696276703.367:1234): pid=3235 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:23.402864 kernel: audit: type=1104 audit(1696276703.367:1235): pid=3235 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:23.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.19:22-10.200.12.6:55722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:23.579219 kubelet[2433]: E1002 19:58:23.579188 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:24.307103 kubelet[2433]: E1002 19:58:24.307054 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:58:28.580666 kubelet[2433]: E1002 19:58:28.580624 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:33.496965 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:33.497168 kernel: audit: type=1130 audit(1696276713.473:1237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.19:22-10.200.12.6:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:33.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.19:22-10.200.12.6:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:33.474789 systemd[1]: Started sshd@20-10.200.8.19:22-10.200.12.6:42802.service. Oct 2 19:58:33.581951 kubelet[2433]: E1002 19:58:33.581905 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:34.103000 audit[3246]: USER_ACCT pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.105453 sshd[3246]: Accepted publickey for core from 10.200.12.6 port 42802 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:34.123000 audit[3246]: CRED_ACQ pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.125842 kernel: audit: type=1101 audit(1696276714.103:1238): pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.125883 kernel: audit: type=1103 audit(1696276714.123:1239): pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.125999 sshd[3246]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:34.131680 systemd[1]: Started session-23.scope. Oct 2 19:58:34.132896 systemd-logind[1317]: New session 23 of user core. Oct 2 19:58:34.153133 kernel: audit: type=1006 audit(1696276714.123:1240): pid=3246 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:58:34.153252 kernel: audit: type=1300 audit(1696276714.123:1240): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe391cf920 a2=3 a3=0 items=0 ppid=1 pid=3246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:34.123000 audit[3246]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe391cf920 a2=3 a3=0 items=0 ppid=1 pid=3246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:34.123000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:34.176485 kernel: audit: type=1327 audit(1696276714.123:1240): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:34.176865 kernel: audit: type=1105 audit(1696276714.135:1241): pid=3246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.135000 audit[3246]: USER_START pid=3246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.195803 kernel: audit: type=1103 audit(1696276714.135:1242): pid=3248 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.135000 audit[3248]: CRED_ACQ pid=3248 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.601711 sshd[3246]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:34.601000 audit[3246]: USER_END pid=3246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.605541 systemd[1]: sshd@20-10.200.8.19:22-10.200.12.6:42802.service: Deactivated successfully. Oct 2 19:58:34.606504 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:58:34.608110 systemd-logind[1317]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:58:34.609134 systemd-logind[1317]: Removed session 23. Oct 2 19:58:34.622608 kernel: audit: type=1106 audit(1696276714.601:1243): pid=3246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.602000 audit[3246]: CRED_DISP pid=3246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.638610 kernel: audit: type=1104 audit(1696276714.602:1244): pid=3246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:34.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.19:22-10.200.12.6:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:38.307328 kubelet[2433]: E1002 19:58:38.307280 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:58:38.583646 kubelet[2433]: E1002 19:58:38.583520 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:43.584728 kubelet[2433]: E1002 19:58:43.584693 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:44.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.19:22-10.200.12.6:59488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:44.720009 systemd[1]: Started sshd@21-10.200.8.19:22-10.200.12.6:59488.service. Oct 2 19:58:44.725871 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:44.725953 kernel: audit: type=1130 audit(1696276724.718:1246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.19:22-10.200.12.6:59488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:45.349000 audit[3259]: USER_ACCT pid=3259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:45.369876 sshd[3259]: Accepted publickey for core from 10.200.12.6 port 59488 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:45.368000 audit[3259]: CRED_ACQ pid=3259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:45.370346 sshd[3259]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:45.376576 systemd[1]: Started session-24.scope. Oct 2 19:58:45.377634 systemd-logind[1317]: New session 24 of user core. Oct 2 19:58:45.387363 kernel: audit: type=1101 audit(1696276725.349:1247): pid=3259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:45.387442 kernel: audit: type=1103 audit(1696276725.368:1248): pid=3259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:45.387466 kernel: audit: type=1006 audit(1696276725.368:1249): pid=3259 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:58:45.368000 audit[3259]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe16b1e8e0 a2=3 a3=0 items=0 ppid=1 pid=3259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:45.414848 kernel: audit: type=1300 audit(1696276725.368:1249): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe16b1e8e0 a2=3 a3=0 items=0 ppid=1 pid=3259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:45.414907 kernel: audit: type=1327 audit(1696276725.368:1249): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:45.368000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:45.381000 audit[3259]: USER_START pid=3259 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:45.439816 kernel: audit: type=1105 audit(1696276725.381:1250): pid=3259 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:45.383000 audit[3261]: CRED_ACQ pid=3261 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:45.440651 kernel: audit: type=1103 audit(1696276725.383:1251): pid=3261 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:46.134066 sshd[3259]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:46.134000 audit[3259]: USER_END pid=3259 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:46.138035 systemd-logind[1317]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:58:46.139416 systemd[1]: sshd@21-10.200.8.19:22-10.200.12.6:59488.service: Deactivated successfully. Oct 2 19:58:46.140210 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:58:46.141847 systemd-logind[1317]: Removed session 24. Oct 2 19:58:46.134000 audit[3259]: CRED_DISP pid=3259 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:46.155612 kernel: audit: type=1106 audit(1696276726.134:1252): pid=3259 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:46.155659 kernel: audit: type=1104 audit(1696276726.134:1253): pid=3259 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:46.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.19:22-10.200.12.6:59488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:48.585744 kubelet[2433]: E1002 19:58:48.585708 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:52.307224 kubelet[2433]: E1002 19:58:52.307174 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:58:53.586737 kubelet[2433]: E1002 19:58:53.586699 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:54.099000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.106141 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:54.106268 kernel: audit: type=1400 audit(1696276734.099:1256): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.099000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.138713 kernel: audit: type=1400 audit(1696276734.099:1255): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.138816 kernel: audit: type=1300 audit(1696276734.099:1256): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a522d0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:54.099000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a522d0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:54.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:54.099000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001072d60 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:54.198896 kernel: audit: type=1327 audit(1696276734.099:1256): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:54.199002 kernel: audit: type=1300 audit(1696276734.099:1255): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001072d60 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:54.199033 kernel: audit: type=1327 audit(1696276734.099:1255): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:54.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:54.741000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.741000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f5be6c0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:58:54.781882 kernel: audit: type=1400 audit(1696276734.741:1257): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.781997 kernel: audit: type=1300 audit(1696276734.741:1257): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f5be6c0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:58:54.782025 kernel: audit: type=1327 audit(1696276734.741:1257): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:54.741000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:54.742000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.818225 kernel: audit: type=1400 audit(1696276734.742:1258): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.742000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f463830 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:58:54.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:54.742000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.742000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f5be7e0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:58:54.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:54.779000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.779000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f6708c0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:58:54.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:54.983000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.983000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:54.983000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0116805d0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:58:54.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:54.983000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0115552a0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:58:54.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:56.223544 systemd[1]: Started sshd@22-10.200.8.19:22-10.200.12.6:60162.service. Oct 2 19:58:56.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.19:22-10.200.12.6:60162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:56.844000 audit[3270]: USER_ACCT pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:56.846332 sshd[3270]: Accepted publickey for core from 10.200.12.6 port 60162 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:56.845000 audit[3270]: CRED_ACQ pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:56.845000 audit[3270]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef24b17d0 a2=3 a3=0 items=0 ppid=1 pid=3270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:56.845000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:56.847907 sshd[3270]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:56.852941 systemd-logind[1317]: New session 25 of user core. Oct 2 19:58:56.853483 systemd[1]: Started session-25.scope. Oct 2 19:58:56.856000 audit[3270]: USER_START pid=3270 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:56.858000 audit[3272]: CRED_ACQ pid=3272 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:57.140000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.140000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001072f40 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:57.140000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:57.141000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.142000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.142000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010731c0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:57.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:57.141000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000453bc0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:57.141000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:57.145000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.145000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010732e0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:58:57.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:57.337523 sshd[3270]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:57.337000 audit[3270]: USER_END pid=3270 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:57.338000 audit[3270]: CRED_DISP pid=3270 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:57.342176 systemd[1]: sshd@22-10.200.8.19:22-10.200.12.6:60162.service: Deactivated successfully. Oct 2 19:58:57.343127 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:58:57.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.19:22-10.200.12.6:60162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:57.343920 systemd-logind[1317]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:58:57.344758 systemd-logind[1317]: Removed session 25. Oct 2 19:58:58.587943 kubelet[2433]: E1002 19:58:58.587908 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:03.588964 kubelet[2433]: E1002 19:59:03.588915 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:07.307417 kubelet[2433]: E1002 19:59:07.307373 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:59:07.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.19:22-10.200.12.6:37138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:07.443932 systemd[1]: Started sshd@23-10.200.8.19:22-10.200.12.6:37138.service. Oct 2 19:59:07.466630 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 19:59:07.466790 kernel: audit: type=1130 audit(1696276747.442:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.19:22-10.200.12.6:37138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:08.374000 audit[3283]: USER_ACCT pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.396040 sshd[3283]: Accepted publickey for core from 10.200.12.6 port 37138 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:08.396402 sshd[3283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:08.396754 kernel: audit: type=1101 audit(1696276748.374:1277): pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.394000 audit[3283]: CRED_ACQ pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.401606 systemd[1]: Started session-26.scope. Oct 2 19:59:08.402606 systemd-logind[1317]: New session 26 of user core. Oct 2 19:59:08.423421 kernel: audit: type=1103 audit(1696276748.394:1278): pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.423523 kernel: audit: type=1006 audit(1696276748.394:1279): pid=3283 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:59:08.423547 kernel: audit: type=1300 audit(1696276748.394:1279): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcee830fa0 a2=3 a3=0 items=0 ppid=1 pid=3283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:08.394000 audit[3283]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcee830fa0 a2=3 a3=0 items=0 ppid=1 pid=3283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:08.441224 kernel: audit: type=1327 audit(1696276748.394:1279): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:08.394000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:08.406000 audit[3283]: USER_START pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.465233 kernel: audit: type=1105 audit(1696276748.406:1280): pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.406000 audit[3285]: CRED_ACQ pid=3285 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.481123 kernel: audit: type=1103 audit(1696276748.406:1281): pid=3285 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.590343 kubelet[2433]: E1002 19:59:08.590310 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:08.878401 sshd[3283]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:08.878000 audit[3283]: USER_END pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.882415 systemd[1]: sshd@23-10.200.8.19:22-10.200.12.6:37138.service: Deactivated successfully. Oct 2 19:59:08.883272 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:59:08.885073 systemd-logind[1317]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:59:08.886021 systemd-logind[1317]: Removed session 26. Oct 2 19:59:08.899668 kernel: audit: type=1106 audit(1696276748.878:1282): pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.899768 kernel: audit: type=1104 audit(1696276748.878:1283): pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.878000 audit[3283]: CRED_DISP pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:08.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.19:22-10.200.12.6:37138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:13.591810 kubelet[2433]: E1002 19:59:13.591759 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:18.593051 kubelet[2433]: E1002 19:59:18.592971 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:18.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.19:22-10.200.12.6:45032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:18.986379 systemd[1]: Started sshd@24-10.200.8.19:22-10.200.12.6:45032.service. Oct 2 19:59:18.991628 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:18.991718 kernel: audit: type=1130 audit(1696276758.985:1285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.19:22-10.200.12.6:45032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:19.612000 audit[3297]: USER_ACCT pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:19.613386 sshd[3297]: Accepted publickey for core from 10.200.12.6 port 45032 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:19.631000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:19.633033 sshd[3297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:19.638431 systemd[1]: Started session-27.scope. Oct 2 19:59:19.640025 systemd-logind[1317]: New session 27 of user core. Oct 2 19:59:19.649338 kernel: audit: type=1101 audit(1696276759.612:1286): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:19.649426 kernel: audit: type=1103 audit(1696276759.631:1287): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:19.659888 kernel: audit: type=1006 audit(1696276759.632:1288): pid=3297 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:59:19.659959 kernel: audit: type=1300 audit(1696276759.632:1288): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed7fa3050 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:19.632000 audit[3297]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed7fa3050 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:19.632000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:19.683429 kernel: audit: type=1327 audit(1696276759.632:1288): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:19.684026 kernel: audit: type=1105 audit(1696276759.644:1289): pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:19.644000 audit[3297]: USER_START pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:19.646000 audit[3299]: CRED_ACQ pid=3299 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:19.717944 kernel: audit: type=1103 audit(1696276759.646:1290): pid=3299 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:20.116921 sshd[3297]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:20.117000 audit[3297]: USER_END pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:20.123952 systemd-logind[1317]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:59:20.125341 systemd[1]: sshd@24-10.200.8.19:22-10.200.12.6:45032.service: Deactivated successfully. Oct 2 19:59:20.126145 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:59:20.127422 systemd-logind[1317]: Removed session 27. Oct 2 19:59:20.117000 audit[3297]: CRED_DISP pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:20.153119 kernel: audit: type=1106 audit(1696276760.117:1291): pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:20.153260 kernel: audit: type=1104 audit(1696276760.117:1292): pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:20.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.19:22-10.200.12.6:45032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:20.307218 kubelet[2433]: E1002 19:59:20.306723 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:59:23.594331 kubelet[2433]: E1002 19:59:23.594287 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:28.595379 kubelet[2433]: E1002 19:59:28.595330 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:30.221666 systemd[1]: Started sshd@25-10.200.8.19:22-10.200.12.6:42350.service. Oct 2 19:59:30.245554 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:30.245717 kernel: audit: type=1130 audit(1696276770.221:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.19:22-10.200.12.6:42350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:30.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.19:22-10.200.12.6:42350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:30.838000 audit[3309]: USER_ACCT pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:30.857665 kernel: audit: type=1101 audit(1696276770.838:1295): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:30.840641 sshd[3309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:30.858077 sshd[3309]: Accepted publickey for core from 10.200.12.6 port 42350 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:30.839000 audit[3309]: CRED_ACQ pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:30.863784 systemd[1]: Started session-28.scope. Oct 2 19:59:30.865037 systemd-logind[1317]: New session 28 of user core. Oct 2 19:59:30.875681 kernel: audit: type=1103 audit(1696276770.839:1296): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:30.875755 kernel: audit: type=1006 audit(1696276770.839:1297): pid=3309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:59:30.839000 audit[3309]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4d3964b0 a2=3 a3=0 items=0 ppid=1 pid=3309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:30.886609 kernel: audit: type=1300 audit(1696276770.839:1297): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4d3964b0 a2=3 a3=0 items=0 ppid=1 pid=3309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:30.839000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:30.909195 kernel: audit: type=1327 audit(1696276770.839:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:30.909265 kernel: audit: type=1105 audit(1696276770.868:1298): pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:30.868000 audit[3309]: USER_START pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:30.868000 audit[3311]: CRED_ACQ pid=3311 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:30.942561 kernel: audit: type=1103 audit(1696276770.868:1299): pid=3311 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:31.330102 sshd[3309]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:31.331000 audit[3309]: USER_END pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:31.334096 systemd[1]: sshd@25-10.200.8.19:22-10.200.12.6:42350.service: Deactivated successfully. Oct 2 19:59:31.334912 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:59:31.336396 systemd-logind[1317]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:59:31.337378 systemd-logind[1317]: Removed session 28. Oct 2 19:59:31.331000 audit[3309]: CRED_DISP pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:31.369113 kernel: audit: type=1106 audit(1696276771.331:1300): pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:31.369197 kernel: audit: type=1104 audit(1696276771.331:1301): pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:31.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.19:22-10.200.12.6:42350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:33.596608 kubelet[2433]: E1002 19:59:33.596552 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:34.307015 kubelet[2433]: E1002 19:59:34.306968 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:59:38.597273 kubelet[2433]: E1002 19:59:38.597232 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:41.435826 systemd[1]: Started sshd@26-10.200.8.19:22-10.200.12.6:52674.service. Oct 2 19:59:41.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.19:22-10.200.12.6:52674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:41.441554 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:41.441785 kernel: audit: type=1130 audit(1696276781.435:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.19:22-10.200.12.6:52674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:42.073303 kernel: audit: type=1101 audit(1696276782.051:1304): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.051000 audit[3322]: USER_ACCT pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.073617 sshd[3322]: Accepted publickey for core from 10.200.12.6 port 52674 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:42.072000 audit[3322]: CRED_ACQ pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.073387 sshd[3322]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:42.083526 systemd[1]: Started session-29.scope. Oct 2 19:59:42.084637 systemd-logind[1317]: New session 29 of user core. Oct 2 19:59:42.092868 kernel: audit: type=1103 audit(1696276782.072:1305): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.092955 kernel: audit: type=1006 audit(1696276782.072:1306): pid=3322 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 19:59:42.072000 audit[3322]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9c5cc1f0 a2=3 a3=0 items=0 ppid=1 pid=3322 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:42.121545 kernel: audit: type=1300 audit(1696276782.072:1306): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9c5cc1f0 a2=3 a3=0 items=0 ppid=1 pid=3322 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:42.121853 kernel: audit: type=1327 audit(1696276782.072:1306): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:42.072000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:42.127535 kernel: audit: type=1105 audit(1696276782.089:1307): pid=3322 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.089000 audit[3322]: USER_START pid=3322 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.091000 audit[3324]: CRED_ACQ pid=3324 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.146612 kernel: audit: type=1103 audit(1696276782.091:1308): pid=3324 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.546000 audit[3322]: USER_END pid=3322 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.545718 sshd[3322]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:42.548944 systemd[1]: sshd@26-10.200.8.19:22-10.200.12.6:52674.service: Deactivated successfully. Oct 2 19:59:42.549765 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:59:42.551277 systemd-logind[1317]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:59:42.552191 systemd-logind[1317]: Removed session 29. Oct 2 19:59:42.546000 audit[3322]: CRED_DISP pid=3322 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.583233 kernel: audit: type=1106 audit(1696276782.546:1309): pid=3322 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.583338 kernel: audit: type=1104 audit(1696276782.546:1310): pid=3322 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:42.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.19:22-10.200.12.6:52674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:43.598874 kubelet[2433]: E1002 19:59:43.598832 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:46.306999 kubelet[2433]: E1002 19:59:46.306952 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-xfbgd_kube-system(1ed762b1-005f-4ae8-8f6c-09ebf556be1f)\"" pod="kube-system/cilium-xfbgd" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" Oct 2 19:59:48.600271 kubelet[2433]: E1002 19:59:48.600232 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:52.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.19:22-10.200.12.6:47318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:52.653305 systemd[1]: Started sshd@27-10.200.8.19:22-10.200.12.6:47318.service. Oct 2 19:59:52.658793 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:52.658857 kernel: audit: type=1130 audit(1696276792.651:1312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.19:22-10.200.12.6:47318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:53.280000 audit[3334]: USER_ACCT pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.282259 sshd[3334]: Accepted publickey for core from 10.200.12.6 port 47318 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:53.299000 audit[3334]: CRED_ACQ pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.301610 sshd[3334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:53.306978 systemd[1]: Started session-30.scope. Oct 2 19:59:53.308463 systemd-logind[1317]: New session 30 of user core. Oct 2 19:59:53.317813 kernel: audit: type=1101 audit(1696276793.280:1313): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.317907 kernel: audit: type=1103 audit(1696276793.299:1314): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.317934 kernel: audit: type=1006 audit(1696276793.299:1315): pid=3334 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:59:53.299000 audit[3334]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1d15c8f0 a2=3 a3=0 items=0 ppid=1 pid=3334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:53.328606 kernel: audit: type=1300 audit(1696276793.299:1315): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1d15c8f0 a2=3 a3=0 items=0 ppid=1 pid=3334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:53.299000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:53.345656 kernel: audit: type=1327 audit(1696276793.299:1315): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:53.312000 audit[3334]: USER_START pid=3334 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.351633 kernel: audit: type=1105 audit(1696276793.312:1316): pid=3334 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.314000 audit[3336]: CRED_ACQ pid=3336 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.384977 kernel: audit: type=1103 audit(1696276793.314:1317): pid=3336 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.601074 kubelet[2433]: E1002 19:59:53.601037 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:53.788855 sshd[3334]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:53.789000 audit[3334]: USER_END pid=3334 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.793056 systemd-logind[1317]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:59:53.794810 systemd[1]: sshd@27-10.200.8.19:22-10.200.12.6:47318.service: Deactivated successfully. Oct 2 19:59:53.795745 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:59:53.797783 systemd-logind[1317]: Removed session 30. Oct 2 19:59:53.789000 audit[3334]: CRED_DISP pid=3334 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.825646 kernel: audit: type=1106 audit(1696276793.789:1318): pid=3334 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.825748 kernel: audit: type=1104 audit(1696276793.789:1319): pid=3334 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:53.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.19:22-10.200.12.6:47318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:53.894398 systemd[1]: Started sshd@28-10.200.8.19:22-10.200.12.6:47322.service. Oct 2 19:59:53.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.19:22-10.200.12.6:47322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:54.100000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.100000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00144a000 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:59:54.100000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:54.100000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.100000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009be020 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:59:54.100000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:54.515000 audit[3346]: USER_ACCT pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:54.517334 sshd[3346]: Accepted publickey for core from 10.200.12.6 port 47322 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:54.516000 audit[3346]: CRED_ACQ pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:54.517000 audit[3346]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8f779bd0 a2=3 a3=0 items=0 ppid=1 pid=3346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:54.517000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:54.519069 sshd[3346]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:54.525028 systemd-logind[1317]: New session 31 of user core. Oct 2 19:59:54.525659 systemd[1]: Started session-31.scope. Oct 2 19:59:54.528000 audit[3346]: USER_START pid=3346 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:54.530000 audit[3348]: CRED_ACQ pid=3348 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:54.742000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.742000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007afd3e0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:59:54.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:54.743000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.743000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.743000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007afd440 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:59:54.743000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:54.743000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007961e90 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:59:54.743000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:54.780000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.780000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a3c4dc0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:59:54.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:54.983000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.983000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007afdb30 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:59:54.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:54.984000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:54.984000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00a3c4f00 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 19:59:54.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:56.138035 env[1336]: time="2023-10-02T19:59:56.133366595Z" level=info msg="StopPodSandbox for \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\"" Oct 2 19:59:56.138035 env[1336]: time="2023-10-02T19:59:56.133538898Z" level=info msg="Container to stop \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:56.135897 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4-shm.mount: Deactivated successfully. Oct 2 19:59:56.146000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:59:56.147637 systemd[1]: cri-containerd-a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4.scope: Deactivated successfully. Oct 2 19:59:56.150000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:59:56.174477 env[1336]: time="2023-10-02T19:59:56.174428246Z" level=info msg="StopContainer for \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\" with timeout 30 (s)" Oct 2 19:59:56.175663 env[1336]: time="2023-10-02T19:59:56.175629268Z" level=info msg="Stop container \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\" with signal terminated" Oct 2 19:59:56.186277 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4-rootfs.mount: Deactivated successfully. Oct 2 19:59:56.195778 systemd[1]: cri-containerd-8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858.scope: Deactivated successfully. Oct 2 19:59:56.194000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:59:56.200000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:59:56.215903 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858-rootfs.mount: Deactivated successfully. Oct 2 19:59:56.263823 env[1336]: time="2023-10-02T19:59:56.263764879Z" level=info msg="shim disconnected" id=8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858 Oct 2 19:59:56.264116 env[1336]: time="2023-10-02T19:59:56.264091585Z" level=warning msg="cleaning up after shim disconnected" id=8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858 namespace=k8s.io Oct 2 19:59:56.264236 env[1336]: time="2023-10-02T19:59:56.264220887Z" level=info msg="cleaning up dead shim" Oct 2 19:59:56.264632 env[1336]: time="2023-10-02T19:59:56.263796580Z" level=info msg="shim disconnected" id=a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4 Oct 2 19:59:56.264743 env[1336]: time="2023-10-02T19:59:56.264639295Z" level=warning msg="cleaning up after shim disconnected" id=a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4 namespace=k8s.io Oct 2 19:59:56.264743 env[1336]: time="2023-10-02T19:59:56.264656895Z" level=info msg="cleaning up dead shim" Oct 2 19:59:56.275989 env[1336]: time="2023-10-02T19:59:56.275942902Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3391 runtime=io.containerd.runc.v2\n" Oct 2 19:59:56.277275 env[1336]: time="2023-10-02T19:59:56.277234925Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3392 runtime=io.containerd.runc.v2\n" Oct 2 19:59:56.277564 env[1336]: time="2023-10-02T19:59:56.277533931Z" level=info msg="TearDown network for sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" successfully" Oct 2 19:59:56.277701 env[1336]: time="2023-10-02T19:59:56.277567631Z" level=info msg="StopPodSandbox for \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" returns successfully" Oct 2 19:59:56.281023 env[1336]: time="2023-10-02T19:59:56.280991894Z" level=info msg="StopContainer for \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\" returns successfully" Oct 2 19:59:56.281504 env[1336]: time="2023-10-02T19:59:56.281477003Z" level=info msg="StopPodSandbox for \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\"" Oct 2 19:59:56.281615 env[1336]: time="2023-10-02T19:59:56.281538204Z" level=info msg="Container to stop \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:56.285164 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0-shm.mount: Deactivated successfully. Oct 2 19:59:56.293346 systemd[1]: cri-containerd-782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0.scope: Deactivated successfully. Oct 2 19:59:56.292000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:59:56.296000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:59:56.319964 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0-rootfs.mount: Deactivated successfully. Oct 2 19:59:56.335690 env[1336]: time="2023-10-02T19:59:56.335639493Z" level=info msg="shim disconnected" id=782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0 Oct 2 19:59:56.335690 env[1336]: time="2023-10-02T19:59:56.335688594Z" level=warning msg="cleaning up after shim disconnected" id=782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0 namespace=k8s.io Oct 2 19:59:56.335939 env[1336]: time="2023-10-02T19:59:56.335699994Z" level=info msg="cleaning up dead shim" Oct 2 19:59:56.344303 env[1336]: time="2023-10-02T19:59:56.344252351Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3436 runtime=io.containerd.runc.v2\n" Oct 2 19:59:56.344660 env[1336]: time="2023-10-02T19:59:56.344624957Z" level=info msg="TearDown network for sandbox \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" successfully" Oct 2 19:59:56.344769 env[1336]: time="2023-10-02T19:59:56.344657258Z" level=info msg="StopPodSandbox for \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" returns successfully" Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351530 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cni-path\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351579 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hubble-tls\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351634 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-d2zmk\" (UniqueName: \"kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-kube-api-access-d2zmk\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351659 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-xtables-lock\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351683 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-net\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351706 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hostproc\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351729 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-bpf-maps\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351753 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-etc-cni-netd\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351777 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-kernel\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351804 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-run\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351832 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-clustermesh-secrets\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351865 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/306c8892-42fb-48f3-a411-bf69c6bf5218-cilium-config-path\") pod \"306c8892-42fb-48f3-a411-bf69c6bf5218\" (UID: \"306c8892-42fb-48f3-a411-bf69c6bf5218\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351896 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vgpxj\" (UniqueName: \"kubernetes.io/projected/306c8892-42fb-48f3-a411-bf69c6bf5218-kube-api-access-vgpxj\") pod \"306c8892-42fb-48f3-a411-bf69c6bf5218\" (UID: \"306c8892-42fb-48f3-a411-bf69c6bf5218\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351924 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-config-path\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351952 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-lib-modules\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.352356 kubelet[2433]: I1002 19:59:56.351993 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-cgroup\") pod \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\" (UID: \"1ed762b1-005f-4ae8-8f6c-09ebf556be1f\") " Oct 2 19:59:56.353286 kubelet[2433]: I1002 19:59:56.352048 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.353286 kubelet[2433]: I1002 19:59:56.352087 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cni-path" (OuterVolumeSpecName: "cni-path") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.353286 kubelet[2433]: I1002 19:59:56.352237 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.353286 kubelet[2433]: I1002 19:59:56.352288 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.354606 kubelet[2433]: I1002 19:59:56.354038 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.354606 kubelet[2433]: I1002 19:59:56.354086 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.354606 kubelet[2433]: I1002 19:59:56.354109 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hostproc" (OuterVolumeSpecName: "hostproc") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.354606 kubelet[2433]: I1002 19:59:56.354128 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.354606 kubelet[2433]: I1002 19:59:56.354159 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.357525 kubelet[2433]: I1002 19:59:56.357498 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/306c8892-42fb-48f3-a411-bf69c6bf5218-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "306c8892-42fb-48f3-a411-bf69c6bf5218" (UID: "306c8892-42fb-48f3-a411-bf69c6bf5218"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:56.360930 kubelet[2433]: I1002 19:59:56.360459 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:56.362051 kubelet[2433]: I1002 19:59:56.362021 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:56.364105 kubelet[2433]: I1002 19:59:56.364081 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:59:56.365938 kubelet[2433]: I1002 19:59:56.365914 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-kube-api-access-d2zmk" (OuterVolumeSpecName: "kube-api-access-d2zmk") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "kube-api-access-d2zmk". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:56.366789 kubelet[2433]: I1002 19:59:56.366762 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/306c8892-42fb-48f3-a411-bf69c6bf5218-kube-api-access-vgpxj" (OuterVolumeSpecName: "kube-api-access-vgpxj") pod "306c8892-42fb-48f3-a411-bf69c6bf5218" (UID: "306c8892-42fb-48f3-a411-bf69c6bf5218"). InnerVolumeSpecName "kube-api-access-vgpxj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:56.368830 kubelet[2433]: I1002 19:59:56.368801 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "1ed762b1-005f-4ae8-8f6c-09ebf556be1f" (UID: "1ed762b1-005f-4ae8-8f6c-09ebf556be1f"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:56.452412 kubelet[2433]: I1002 19:59:56.452259 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-config-path\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.452412 kubelet[2433]: I1002 19:59:56.452304 2433 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-lib-modules\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.452412 kubelet[2433]: I1002 19:59:56.452327 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-cgroup\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.452412 kubelet[2433]: I1002 19:59:56.452345 2433 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-d2zmk\" (UniqueName: \"kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-kube-api-access-d2zmk\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.452412 kubelet[2433]: I1002 19:59:56.452361 2433 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-xtables-lock\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.452412 kubelet[2433]: I1002 19:59:56.452378 2433 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-net\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.453654 kubelet[2433]: I1002 19:59:56.453628 2433 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hostproc\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.453789 kubelet[2433]: I1002 19:59:56.453772 2433 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cni-path\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.453885 kubelet[2433]: I1002 19:59:56.453875 2433 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-hubble-tls\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.453970 kubelet[2433]: I1002 19:59:56.453961 2433 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-bpf-maps\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.454105 kubelet[2433]: I1002 19:59:56.454096 2433 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-etc-cni-netd\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.454178 kubelet[2433]: I1002 19:59:56.454171 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-cilium-run\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.454258 kubelet[2433]: I1002 19:59:56.454250 2433 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-clustermesh-secrets\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.454338 kubelet[2433]: I1002 19:59:56.454330 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/306c8892-42fb-48f3-a411-bf69c6bf5218-cilium-config-path\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.454411 kubelet[2433]: I1002 19:59:56.454403 2433 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-vgpxj\" (UniqueName: \"kubernetes.io/projected/306c8892-42fb-48f3-a411-bf69c6bf5218-kube-api-access-vgpxj\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:56.454481 kubelet[2433]: I1002 19:59:56.454474 2433 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1ed762b1-005f-4ae8-8f6c-09ebf556be1f-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 19:59:57.136284 systemd[1]: var-lib-kubelet-pods-306c8892\x2d42fb\x2d48f3\x2da411\x2dbf69c6bf5218-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvgpxj.mount: Deactivated successfully. Oct 2 19:59:57.136768 systemd[1]: var-lib-kubelet-pods-1ed762b1\x2d005f\x2d4ae8\x2d8f6c\x2d09ebf556be1f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dd2zmk.mount: Deactivated successfully. Oct 2 19:59:57.137050 systemd[1]: var-lib-kubelet-pods-1ed762b1\x2d005f\x2d4ae8\x2d8f6c\x2d09ebf556be1f-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:59:57.137162 systemd[1]: var-lib-kubelet-pods-1ed762b1\x2d005f\x2d4ae8\x2d8f6c\x2d09ebf556be1f-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:59:57.140000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.140000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5ef40 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:59:57.140000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:57.142000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.142000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f50280 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:59:57.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:57.144000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.144000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f503a0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:59:57.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:57.146000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.146000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f504c0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 19:59:57.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:57.153523 kubelet[2433]: I1002 19:59:57.153497 2433 scope.go:117] "RemoveContainer" containerID="71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55" Oct 2 19:59:57.154972 env[1336]: time="2023-10-02T19:59:57.154935658Z" level=info msg="RemoveContainer for \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\"" Oct 2 19:59:57.159824 systemd[1]: Removed slice kubepods-burstable-pod1ed762b1_005f_4ae8_8f6c_09ebf556be1f.slice. Oct 2 19:59:57.163906 systemd[1]: Removed slice kubepods-besteffort-pod306c8892_42fb_48f3_a411_bf69c6bf5218.slice. Oct 2 19:59:57.165066 env[1336]: time="2023-10-02T19:59:57.164858239Z" level=info msg="RemoveContainer for \"71b92393529c737204b158b8999f5177e575711796934267c4f3f0102d3c4d55\" returns successfully" Oct 2 19:59:57.166613 kubelet[2433]: I1002 19:59:57.165860 2433 scope.go:117] "RemoveContainer" containerID="8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858" Oct 2 19:59:57.168761 env[1336]: time="2023-10-02T19:59:57.168717809Z" level=info msg="RemoveContainer for \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\"" Oct 2 19:59:57.177874 env[1336]: time="2023-10-02T19:59:57.177841675Z" level=info msg="RemoveContainer for \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\" returns successfully" Oct 2 19:59:57.178920 kubelet[2433]: I1002 19:59:57.178898 2433 scope.go:117] "RemoveContainer" containerID="8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858" Oct 2 19:59:57.179182 env[1336]: time="2023-10-02T19:59:57.179086898Z" level=error msg="ContainerStatus for \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\": not found" Oct 2 19:59:57.179323 kubelet[2433]: E1002 19:59:57.179304 2433 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\": not found" containerID="8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858" Oct 2 19:59:57.179412 kubelet[2433]: I1002 19:59:57.179347 2433 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858"} err="failed to get container status \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\": rpc error: code = NotFound desc = an error occurred when try to find container \"8cdb1620d8e70617e94767ecbcef972e4a7d0c640b2b32de3b3b3dd1c7cd3858\": not found" Oct 2 19:59:58.202864 sshd[3346]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:58.203000 audit[3346]: USER_END pid=3346 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.206804 systemd[1]: sshd@28-10.200.8.19:22-10.200.12.6:47322.service: Deactivated successfully. Oct 2 19:59:58.207668 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 19:59:58.210121 kernel: kauditd_printk_skb: 51 callbacks suppressed Oct 2 19:59:58.210196 kernel: audit: type=1106 audit(1696276798.203:1345): pid=3346 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.209740 systemd-logind[1317]: Session 31 logged out. Waiting for processes to exit. Oct 2 19:59:58.210926 systemd-logind[1317]: Removed session 31. Oct 2 19:59:58.203000 audit[3346]: CRED_DISP pid=3346 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.244451 kernel: audit: type=1104 audit(1696276798.203:1346): pid=3346 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.19:22-10.200.12.6:47322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:58.261103 kernel: audit: type=1131 audit(1696276798.203:1347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.19:22-10.200.12.6:47322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:58.308351 systemd[1]: Started sshd@29-10.200.8.19:22-10.200.12.6:60164.service. Oct 2 19:59:58.309024 kubelet[2433]: I1002 19:59:58.308997 2433 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" path="/var/lib/kubelet/pods/1ed762b1-005f-4ae8-8f6c-09ebf556be1f/volumes" Oct 2 19:59:58.330109 kernel: audit: type=1130 audit(1696276798.306:1348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.19:22-10.200.12.6:60164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:58.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.19:22-10.200.12.6:60164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:58.330332 kubelet[2433]: I1002 19:59:58.319998 2433 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="306c8892-42fb-48f3-a411-bf69c6bf5218" path="/var/lib/kubelet/pods/306c8892-42fb-48f3-a411-bf69c6bf5218/volumes" Oct 2 19:59:58.371895 env[1336]: time="2023-10-02T19:59:58.371851362Z" level=info msg="StopPodSandbox for \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\"" Oct 2 19:59:58.372366 env[1336]: time="2023-10-02T19:59:58.371959364Z" level=info msg="TearDown network for sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" successfully" Oct 2 19:59:58.372366 env[1336]: time="2023-10-02T19:59:58.372005465Z" level=info msg="StopPodSandbox for \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" returns successfully" Oct 2 19:59:58.372505 env[1336]: time="2023-10-02T19:59:58.372470573Z" level=info msg="RemovePodSandbox for \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\"" Oct 2 19:59:58.372557 env[1336]: time="2023-10-02T19:59:58.372511674Z" level=info msg="Forcibly stopping sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\"" Oct 2 19:59:58.372658 env[1336]: time="2023-10-02T19:59:58.372629076Z" level=info msg="TearDown network for sandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" successfully" Oct 2 19:59:58.380459 env[1336]: time="2023-10-02T19:59:58.380415317Z" level=info msg="RemovePodSandbox \"a6dbce7d26b2af6378699d70f489c04f03b4ae757687823eacde7538a206b6b4\" returns successfully" Oct 2 19:59:58.381001 env[1336]: time="2023-10-02T19:59:58.380836925Z" level=info msg="StopPodSandbox for \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\"" Oct 2 19:59:58.381001 env[1336]: time="2023-10-02T19:59:58.380916126Z" level=info msg="TearDown network for sandbox \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" successfully" Oct 2 19:59:58.381001 env[1336]: time="2023-10-02T19:59:58.380945927Z" level=info msg="StopPodSandbox for \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" returns successfully" Oct 2 19:59:58.381251 env[1336]: time="2023-10-02T19:59:58.381207531Z" level=info msg="RemovePodSandbox for \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\"" Oct 2 19:59:58.381311 env[1336]: time="2023-10-02T19:59:58.381253032Z" level=info msg="Forcibly stopping sandbox \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\"" Oct 2 19:59:58.381358 env[1336]: time="2023-10-02T19:59:58.381329834Z" level=info msg="TearDown network for sandbox \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" successfully" Oct 2 19:59:58.389944 env[1336]: time="2023-10-02T19:59:58.389890689Z" level=info msg="RemovePodSandbox \"782577c4fb52cb3b3c48ef8596b3a1f3b8267874b77a6b860cfd00e9a37c87d0\" returns successfully" Oct 2 19:59:58.602857 kubelet[2433]: E1002 19:59:58.602822 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:58.934000 audit[3455]: USER_ACCT pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.955987 sshd[3455]: Accepted publickey for core from 10.200.12.6 port 60164 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:58.954000 audit[3455]: CRED_ACQ pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.956737 sshd[3455]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:58.962158 systemd[1]: Started session-32.scope. Oct 2 19:59:58.963272 systemd-logind[1317]: New session 32 of user core. Oct 2 19:59:58.973205 kernel: audit: type=1101 audit(1696276798.934:1349): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.973278 kernel: audit: type=1103 audit(1696276798.954:1350): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.973613 kernel: audit: type=1006 audit(1696276798.954:1351): pid=3455 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 19:59:58.954000 audit[3455]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd28c84a80 a2=3 a3=0 items=0 ppid=1 pid=3455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:58.983708 kernel: audit: type=1300 audit(1696276798.954:1351): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd28c84a80 a2=3 a3=0 items=0 ppid=1 pid=3455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:58.954000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:59.006937 kernel: audit: type=1327 audit(1696276798.954:1351): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:59.007023 kernel: audit: type=1105 audit(1696276798.967:1352): pid=3455 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.967000 audit[3455]: USER_START pid=3455 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.969000 audit[3459]: CRED_ACQ pid=3459 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:59.843991 kubelet[2433]: I1002 19:59:59.843940 2433 topology_manager.go:215] "Topology Admit Handler" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" podNamespace="kube-system" podName="cilium-ww8rg" Oct 2 19:59:59.844487 kubelet[2433]: E1002 19:59:59.844036 2433 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: E1002 19:59:59.844048 2433 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: E1002 19:59:59.844057 2433 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="306c8892-42fb-48f3-a411-bf69c6bf5218" containerName="cilium-operator" Oct 2 19:59:59.844487 kubelet[2433]: E1002 19:59:59.844066 2433 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: E1002 19:59:59.844075 2433 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: E1002 19:59:59.844083 2433 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: I1002 19:59:59.844108 2433 memory_manager.go:346] "RemoveStaleState removing state" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: I1002 19:59:59.844118 2433 memory_manager.go:346] "RemoveStaleState removing state" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: I1002 19:59:59.844126 2433 memory_manager.go:346] "RemoveStaleState removing state" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: I1002 19:59:59.844135 2433 memory_manager.go:346] "RemoveStaleState removing state" podUID="306c8892-42fb-48f3-a411-bf69c6bf5218" containerName="cilium-operator" Oct 2 19:59:59.844487 kubelet[2433]: I1002 19:59:59.844144 2433 memory_manager.go:346] "RemoveStaleState removing state" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: E1002 19:59:59.844167 2433 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: I1002 19:59:59.844193 2433 memory_manager.go:346] "RemoveStaleState removing state" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.844487 kubelet[2433]: I1002 19:59:59.844201 2433 memory_manager.go:346] "RemoveStaleState removing state" podUID="1ed762b1-005f-4ae8-8f6c-09ebf556be1f" containerName="mount-cgroup" Oct 2 19:59:59.850580 systemd[1]: Created slice kubepods-burstable-pod808d1282_d1f3_42ab_9e91_93b5873b3529.slice. Oct 2 19:59:59.872760 kubelet[2433]: I1002 19:59:59.872721 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-run\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873074 kubelet[2433]: I1002 19:59:59.873056 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cni-path\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873237 kubelet[2433]: I1002 19:59:59.873225 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-xtables-lock\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873370 kubelet[2433]: I1002 19:59:59.873360 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-bpf-maps\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873508 kubelet[2433]: I1002 19:59:59.873497 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-etc-cni-netd\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873634 kubelet[2433]: I1002 19:59:59.873621 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-net\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873746 kubelet[2433]: I1002 19:59:59.873735 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-hostproc\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873869 kubelet[2433]: I1002 19:59:59.873858 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-config-path\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.873978 kubelet[2433]: I1002 19:59:59.873967 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-ipsec-secrets\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.874102 kubelet[2433]: I1002 19:59:59.874090 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-kernel\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.874215 kubelet[2433]: I1002 19:59:59.874202 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-hubble-tls\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.874341 kubelet[2433]: I1002 19:59:59.874330 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-cgroup\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.874447 kubelet[2433]: I1002 19:59:59.874438 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-clustermesh-secrets\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.874550 kubelet[2433]: I1002 19:59:59.874541 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-lib-modules\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 19:59:59.874683 kubelet[2433]: I1002 19:59:59.874671 2433 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-22f95\" (UniqueName: \"kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-kube-api-access-22f95\") pod \"cilium-ww8rg\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " pod="kube-system/cilium-ww8rg" Oct 2 20:00:00.159112 env[1336]: time="2023-10-02T20:00:00.158917990Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ww8rg,Uid:808d1282-d1f3-42ab-9e91-93b5873b3529,Namespace:kube-system,Attempt:0,}" Oct 2 20:00:00.327187 env[1336]: time="2023-10-02T20:00:00.327113104Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:00:00.327491 env[1336]: time="2023-10-02T20:00:00.327158505Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:00:00.327491 env[1336]: time="2023-10-02T20:00:00.327172405Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:00:00.327491 env[1336]: time="2023-10-02T20:00:00.327387209Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa pid=3477 runtime=io.containerd.runc.v2 Oct 2 20:00:00.341220 systemd[1]: Started cri-containerd-5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa.scope. Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.353000 audit: BPF prog-id=126 op=LOAD Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:00.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562346365363461333935396464323466666134363464333561656634 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:00.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562346365363461333935396464323466666134363464333561656634 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit: BPF prog-id=127 op=LOAD Oct 2 20:00:00.354000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000216340 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:00.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562346365363461333935396464323466666134363464333561656634 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit: BPF prog-id=128 op=LOAD Oct 2 20:00:00.354000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000216388 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:00.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562346365363461333935396464323466666134363464333561656634 Oct 2 20:00:00.354000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:00:00.354000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:00.354000 audit: BPF prog-id=129 op=LOAD Oct 2 20:00:00.354000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000216798 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:00.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562346365363461333935396464323466666134363464333561656634 Oct 2 20:00:00.372094 env[1336]: time="2023-10-02T20:00:00.372045509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ww8rg,Uid:808d1282-d1f3-42ab-9e91-93b5873b3529,Namespace:kube-system,Attempt:0,} returns sandbox id \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\"" Oct 2 20:00:00.375786 env[1336]: time="2023-10-02T20:00:00.375352769Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:00:00.407213 env[1336]: time="2023-10-02T20:00:00.407154038Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\"" Oct 2 20:00:00.409674 env[1336]: time="2023-10-02T20:00:00.408915270Z" level=info msg="StartContainer for \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\"" Oct 2 20:00:00.427838 systemd[1]: Started cri-containerd-e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40.scope. Oct 2 20:00:00.447188 systemd[1]: cri-containerd-e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40.scope: Deactivated successfully. Oct 2 20:00:00.544571 env[1336]: time="2023-10-02T20:00:00.544484399Z" level=info msg="shim disconnected" id=e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40 Oct 2 20:00:00.544571 env[1336]: time="2023-10-02T20:00:00.544568701Z" level=warning msg="cleaning up after shim disconnected" id=e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40 namespace=k8s.io Oct 2 20:00:00.544571 env[1336]: time="2023-10-02T20:00:00.544582301Z" level=info msg="cleaning up dead shim" Oct 2 20:00:00.553447 env[1336]: time="2023-10-02T20:00:00.553388459Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3539 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:00.553775 env[1336]: time="2023-10-02T20:00:00.553711165Z" level=error msg="copy shim log" error="read /proc/self/fd/37: file already closed" Oct 2 20:00:00.554218 env[1336]: time="2023-10-02T20:00:00.554165973Z" level=error msg="Failed to pipe stdout of container \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\"" error="reading from a closed fifo" Oct 2 20:00:00.554406 env[1336]: time="2023-10-02T20:00:00.554350876Z" level=error msg="Failed to pipe stderr of container \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\"" error="reading from a closed fifo" Oct 2 20:00:00.558558 env[1336]: time="2023-10-02T20:00:00.558493951Z" level=error msg="StartContainer for \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:00.558876 kubelet[2433]: E1002 20:00:00.558851 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40" Oct 2 20:00:00.560612 kubelet[2433]: E1002 20:00:00.559268 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:00.560612 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:00.560612 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 20:00:00.560612 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-22f95,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:00.560612 kubelet[2433]: E1002 20:00:00.559336 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:01.172330 env[1336]: time="2023-10-02T20:00:01.172280235Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:00:01.202297 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4022523880.mount: Deactivated successfully. Oct 2 20:00:01.215019 env[1336]: time="2023-10-02T20:00:01.214975096Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\"" Oct 2 20:00:01.215923 env[1336]: time="2023-10-02T20:00:01.215884612Z" level=info msg="StartContainer for \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\"" Oct 2 20:00:01.233537 systemd[1]: Started cri-containerd-0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70.scope. Oct 2 20:00:01.245021 systemd[1]: cri-containerd-0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70.scope: Deactivated successfully. Oct 2 20:00:01.262525 env[1336]: time="2023-10-02T20:00:01.262462843Z" level=info msg="shim disconnected" id=0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70 Oct 2 20:00:01.262525 env[1336]: time="2023-10-02T20:00:01.262528944Z" level=warning msg="cleaning up after shim disconnected" id=0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70 namespace=k8s.io Oct 2 20:00:01.262525 env[1336]: time="2023-10-02T20:00:01.262541044Z" level=info msg="cleaning up dead shim" Oct 2 20:00:01.270745 env[1336]: time="2023-10-02T20:00:01.270691190Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3580 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:01.271047 env[1336]: time="2023-10-02T20:00:01.270983895Z" level=error msg="copy shim log" error="read /proc/self/fd/37: file already closed" Oct 2 20:00:01.271251 env[1336]: time="2023-10-02T20:00:01.271207299Z" level=error msg="Failed to pipe stdout of container \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\"" error="reading from a closed fifo" Oct 2 20:00:01.271411 env[1336]: time="2023-10-02T20:00:01.271358701Z" level=error msg="Failed to pipe stderr of container \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\"" error="reading from a closed fifo" Oct 2 20:00:01.276026 env[1336]: time="2023-10-02T20:00:01.275981584Z" level=error msg="StartContainer for \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:01.276482 kubelet[2433]: E1002 20:00:01.276259 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70" Oct 2 20:00:01.276482 kubelet[2433]: E1002 20:00:01.276402 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:01.276482 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:01.276482 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 20:00:01.276482 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-22f95,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:01.276482 kubelet[2433]: E1002 20:00:01.276456 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:02.172640 kubelet[2433]: I1002 20:00:02.172575 2433 scope.go:117] "RemoveContainer" containerID="e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40" Oct 2 20:00:02.173218 kubelet[2433]: I1002 20:00:02.173120 2433 scope.go:117] "RemoveContainer" containerID="e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40" Oct 2 20:00:02.174844 env[1336]: time="2023-10-02T20:00:02.174796096Z" level=info msg="RemoveContainer for \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\"" Oct 2 20:00:02.175811 env[1336]: time="2023-10-02T20:00:02.175752313Z" level=info msg="RemoveContainer for \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\"" Oct 2 20:00:02.175945 env[1336]: time="2023-10-02T20:00:02.175900715Z" level=error msg="RemoveContainer for \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\" failed" error="failed to set removing state for container \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\": container is already in removing state" Oct 2 20:00:02.176136 kubelet[2433]: E1002 20:00:02.176093 2433 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\": container is already in removing state" containerID="e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40" Oct 2 20:00:02.176221 kubelet[2433]: E1002 20:00:02.176153 2433 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40": container is already in removing state; Skipping pod "cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)" Oct 2 20:00:02.176614 kubelet[2433]: E1002 20:00:02.176577 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:02.184553 env[1336]: time="2023-10-02T20:00:02.184513568Z" level=info msg="RemoveContainer for \"e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40\" returns successfully" Oct 2 20:00:03.604119 kubelet[2433]: E1002 20:00:03.604076 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:03.650865 kubelet[2433]: W1002 20:00:03.650814 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod808d1282_d1f3_42ab_9e91_93b5873b3529.slice/cri-containerd-e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40.scope WatchSource:0}: container "e48b3f096dc578d1649282e046830fbe4261edacf0ee3e7601f443e347d4bc40" in namespace "k8s.io": not found Oct 2 20:00:06.759647 kubelet[2433]: W1002 20:00:06.759564 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod808d1282_d1f3_42ab_9e91_93b5873b3529.slice/cri-containerd-0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70.scope WatchSource:0}: task 0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70 not found: not found Oct 2 20:00:08.605398 kubelet[2433]: E1002 20:00:08.605343 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:13.606696 kubelet[2433]: E1002 20:00:13.606653 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:15.309614 env[1336]: time="2023-10-02T20:00:15.309539979Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:00:15.339370 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3202232566.mount: Deactivated successfully. Oct 2 20:00:15.353401 env[1336]: time="2023-10-02T20:00:15.353351609Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\"" Oct 2 20:00:15.354300 env[1336]: time="2023-10-02T20:00:15.354259124Z" level=info msg="StartContainer for \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\"" Oct 2 20:00:15.378985 systemd[1]: Started cri-containerd-a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0.scope. Oct 2 20:00:15.390236 systemd[1]: cri-containerd-a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0.scope: Deactivated successfully. Oct 2 20:00:15.418831 env[1336]: time="2023-10-02T20:00:15.418773499Z" level=info msg="shim disconnected" id=a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0 Oct 2 20:00:15.418831 env[1336]: time="2023-10-02T20:00:15.418831600Z" level=warning msg="cleaning up after shim disconnected" id=a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0 namespace=k8s.io Oct 2 20:00:15.419124 env[1336]: time="2023-10-02T20:00:15.418842100Z" level=info msg="cleaning up dead shim" Oct 2 20:00:15.427644 env[1336]: time="2023-10-02T20:00:15.427580146Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3619 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:15.427975 env[1336]: time="2023-10-02T20:00:15.427912451Z" level=error msg="copy shim log" error="read /proc/self/fd/37: file already closed" Oct 2 20:00:15.428333 env[1336]: time="2023-10-02T20:00:15.428284157Z" level=error msg="Failed to pipe stderr of container \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\"" error="reading from a closed fifo" Oct 2 20:00:15.428401 env[1336]: time="2023-10-02T20:00:15.428295458Z" level=error msg="Failed to pipe stdout of container \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\"" error="reading from a closed fifo" Oct 2 20:00:15.432603 env[1336]: time="2023-10-02T20:00:15.432550628Z" level=error msg="StartContainer for \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:15.432809 kubelet[2433]: E1002 20:00:15.432777 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0" Oct 2 20:00:15.433178 kubelet[2433]: E1002 20:00:15.432919 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:15.433178 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:15.433178 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 20:00:15.433178 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-22f95,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:15.433178 kubelet[2433]: E1002 20:00:15.432971 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:16.202995 kubelet[2433]: I1002 20:00:16.202956 2433 scope.go:117] "RemoveContainer" containerID="0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70" Oct 2 20:00:16.203643 kubelet[2433]: I1002 20:00:16.203612 2433 scope.go:117] "RemoveContainer" containerID="0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70" Oct 2 20:00:16.205165 env[1336]: time="2023-10-02T20:00:16.205124681Z" level=info msg="RemoveContainer for \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\"" Oct 2 20:00:16.205820 env[1336]: time="2023-10-02T20:00:16.205410186Z" level=info msg="RemoveContainer for \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\"" Oct 2 20:00:16.206045 env[1336]: time="2023-10-02T20:00:16.206007696Z" level=error msg="RemoveContainer for \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\" failed" error="failed to set removing state for container \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\": container is already in removing state" Oct 2 20:00:16.206307 kubelet[2433]: E1002 20:00:16.206287 2433 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\": container is already in removing state" containerID="0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70" Oct 2 20:00:16.206409 kubelet[2433]: E1002 20:00:16.206323 2433 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70": container is already in removing state; Skipping pod "cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)" Oct 2 20:00:16.206720 kubelet[2433]: E1002 20:00:16.206701 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:16.217574 env[1336]: time="2023-10-02T20:00:16.217481486Z" level=info msg="RemoveContainer for \"0a4a9e700db56eaf39f8ee0bdc5e57819151d6c80d986c02f1b0e8883d57bd70\" returns successfully" Oct 2 20:00:16.336015 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0-rootfs.mount: Deactivated successfully. Oct 2 20:00:18.524559 kubelet[2433]: W1002 20:00:18.524498 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod808d1282_d1f3_42ab_9e91_93b5873b3529.slice/cri-containerd-a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0.scope WatchSource:0}: task a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0 not found: not found Oct 2 20:00:18.608213 kubelet[2433]: E1002 20:00:18.608161 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:23.609807 kubelet[2433]: E1002 20:00:23.609753 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:28.307274 kubelet[2433]: E1002 20:00:28.307222 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:28.611392 kubelet[2433]: E1002 20:00:28.611262 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:33.612567 kubelet[2433]: E1002 20:00:33.612519 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:38.614245 kubelet[2433]: E1002 20:00:38.614208 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:43.309537 env[1336]: time="2023-10-02T20:00:43.309479214Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:00:43.333672 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3878077201.mount: Deactivated successfully. Oct 2 20:00:43.344426 env[1336]: time="2023-10-02T20:00:43.344375925Z" level=info msg="CreateContainer within sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\"" Oct 2 20:00:43.345357 env[1336]: time="2023-10-02T20:00:43.345320339Z" level=info msg="StartContainer for \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\"" Oct 2 20:00:43.370961 systemd[1]: Started cri-containerd-6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea.scope. Oct 2 20:00:43.384468 systemd[1]: cri-containerd-6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea.scope: Deactivated successfully. Oct 2 20:00:43.415203 env[1336]: time="2023-10-02T20:00:43.415142063Z" level=info msg="shim disconnected" id=6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea Oct 2 20:00:43.415452 env[1336]: time="2023-10-02T20:00:43.415208364Z" level=warning msg="cleaning up after shim disconnected" id=6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea namespace=k8s.io Oct 2 20:00:43.415452 env[1336]: time="2023-10-02T20:00:43.415220764Z" level=info msg="cleaning up dead shim" Oct 2 20:00:43.423114 env[1336]: time="2023-10-02T20:00:43.423061679Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3656 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:43Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:43.423384 env[1336]: time="2023-10-02T20:00:43.423325483Z" level=error msg="copy shim log" error="read /proc/self/fd/37: file already closed" Oct 2 20:00:43.423621 env[1336]: time="2023-10-02T20:00:43.423564687Z" level=error msg="Failed to pipe stderr of container \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\"" error="reading from a closed fifo" Oct 2 20:00:43.430678 env[1336]: time="2023-10-02T20:00:43.430626790Z" level=error msg="Failed to pipe stdout of container \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\"" error="reading from a closed fifo" Oct 2 20:00:43.435065 env[1336]: time="2023-10-02T20:00:43.435023555Z" level=error msg="StartContainer for \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:43.435326 kubelet[2433]: E1002 20:00:43.435300 2433 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea" Oct 2 20:00:43.436922 kubelet[2433]: E1002 20:00:43.436058 2433 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:43.436922 kubelet[2433]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:43.436922 kubelet[2433]: rm /hostbin/cilium-mount Oct 2 20:00:43.436922 kubelet[2433]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-22f95,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:43.436922 kubelet[2433]: E1002 20:00:43.436125 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:43.615367 kubelet[2433]: E1002 20:00:43.615223 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:44.259432 kubelet[2433]: I1002 20:00:44.259390 2433 scope.go:117] "RemoveContainer" containerID="a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0" Oct 2 20:00:44.259928 kubelet[2433]: I1002 20:00:44.259901 2433 scope.go:117] "RemoveContainer" containerID="a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0" Oct 2 20:00:44.261967 env[1336]: time="2023-10-02T20:00:44.261919562Z" level=info msg="RemoveContainer for \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\"" Oct 2 20:00:44.262950 env[1336]: time="2023-10-02T20:00:44.262901576Z" level=info msg="RemoveContainer for \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\"" Oct 2 20:00:44.263233 env[1336]: time="2023-10-02T20:00:44.263183781Z" level=error msg="RemoveContainer for \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\" failed" error="failed to set removing state for container \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\": container is already in removing state" Oct 2 20:00:44.263571 kubelet[2433]: E1002 20:00:44.263547 2433 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\": container is already in removing state" containerID="a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0" Oct 2 20:00:44.263711 kubelet[2433]: E1002 20:00:44.263600 2433 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0": container is already in removing state; Skipping pod "cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)" Oct 2 20:00:44.266625 kubelet[2433]: E1002 20:00:44.264213 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:44.274939 env[1336]: time="2023-10-02T20:00:44.274894852Z" level=info msg="RemoveContainer for \"a9cf67008da84a57ad5421e10a8a2847480898fd41739c84093b537cd49db4c0\" returns successfully" Oct 2 20:00:44.330294 systemd[1]: run-containerd-runc-k8s.io-6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea-runc.PiVniy.mount: Deactivated successfully. Oct 2 20:00:44.330414 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea-rootfs.mount: Deactivated successfully. Oct 2 20:00:46.521971 kubelet[2433]: W1002 20:00:46.521923 2433 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod808d1282_d1f3_42ab_9e91_93b5873b3529.slice/cri-containerd-6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea.scope WatchSource:0}: task 6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea not found: not found Oct 2 20:00:48.616144 kubelet[2433]: E1002 20:00:48.616049 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:53.617538 kubelet[2433]: E1002 20:00:53.617498 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:54.101000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.107400 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:00:54.107550 kernel: audit: type=1400 audit(1696276854.101:1373): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.101000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.140453 kernel: audit: type=1400 audit(1696276854.101:1372): avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.140601 kernel: audit: type=1300 audit(1696276854.101:1372): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022465a0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:54.101000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022465a0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:54.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:54.180110 kernel: audit: type=1327 audit(1696276854.101:1372): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:54.180244 kernel: audit: type=1300 audit(1696276854.101:1373): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e5f160 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:54.101000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e5f160 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:54.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:54.219736 kernel: audit: type=1327 audit(1696276854.101:1373): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:54.743000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.743000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007906420 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 20:00:54.764614 kernel: audit: type=1400 audit(1696276854.743:1374): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.764669 kernel: audit: type=1300 audit(1696276854.743:1374): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007906420 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 20:00:54.743000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:54.801341 kernel: audit: type=1327 audit(1696276854.743:1374): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:54.744000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.744000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0079064e0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 20:00:54.744000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:54.745000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.818649 kernel: audit: type=1400 audit(1696276854.744:1375): avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4870 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.745000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007906660 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 20:00:54.745000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:54.782000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.782000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0067b7920 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 20:00:54.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:54.984000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.984000 audit[2311]: AVC avc: denied { watch } for pid=2311 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:54.984000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0077ed0a0 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 20:00:54.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:54.984000 audit[2311]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007791d40 a2=fc6 a3=0 items=0 ppid=2156 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c914,c973 key=(null) Oct 2 20:00:54.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:57.142000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.142000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f8a580 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:57.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:57.142000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.142000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5f5a0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:57.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:57.144000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.144000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5f7e0 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:57.144000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:57.147000 audit[2255]: AVC avc: denied { watch } for pid=2255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.147000 audit[2255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e5fa00 a2=fc6 a3=0 items=0 ppid=2115 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:00:57.147000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:57.307295 kubelet[2433]: E1002 20:00:57.307256 2433 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-ww8rg_kube-system(808d1282-d1f3-42ab-9e91-93b5873b3529)\"" pod="kube-system/cilium-ww8rg" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" Oct 2 20:00:58.618322 kubelet[2433]: E1002 20:00:58.618278 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:01.037417 env[1336]: time="2023-10-02T20:01:01.037332090Z" level=info msg="StopPodSandbox for \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\"" Oct 2 20:01:01.037946 env[1336]: time="2023-10-02T20:01:01.037465192Z" level=info msg="Container to stop \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:01:01.039660 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa-shm.mount: Deactivated successfully. Oct 2 20:01:01.068626 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:01:01.068787 kernel: audit: type=1334 audit(1696276861.052:1384): prog-id=126 op=UNLOAD Oct 2 20:01:01.052000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:01:01.054222 systemd[1]: cri-containerd-5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa.scope: Deactivated successfully. Oct 2 20:01:01.066000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:01:01.077706 kernel: audit: type=1334 audit(1696276861.066:1385): prog-id=129 op=UNLOAD Oct 2 20:01:01.094303 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa-rootfs.mount: Deactivated successfully. Oct 2 20:01:01.164435 env[1336]: time="2023-10-02T20:01:01.164378617Z" level=info msg="shim disconnected" id=5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa Oct 2 20:01:01.164435 env[1336]: time="2023-10-02T20:01:01.164436318Z" level=warning msg="cleaning up after shim disconnected" id=5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa namespace=k8s.io Oct 2 20:01:01.164790 env[1336]: time="2023-10-02T20:01:01.164448318Z" level=info msg="cleaning up dead shim" Oct 2 20:01:01.173278 env[1336]: time="2023-10-02T20:01:01.173233437Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3687 runtime=io.containerd.runc.v2\n" Oct 2 20:01:01.173619 env[1336]: time="2023-10-02T20:01:01.173568242Z" level=info msg="TearDown network for sandbox \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" successfully" Oct 2 20:01:01.173721 env[1336]: time="2023-10-02T20:01:01.173620643Z" level=info msg="StopPodSandbox for \"5b4ce64a3959dd24ffa464d35aef4d034ea11e255374b9e4f64c419cf7fb1dfa\" returns successfully" Oct 2 20:01:01.206394 sshd[3455]: pam_unix(sshd:session): session closed for user core Oct 2 20:01:01.206000 audit[3455]: USER_END pid=3455 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:01.209819 systemd[1]: sshd@29-10.200.8.19:22-10.200.12.6:60164.service: Deactivated successfully. Oct 2 20:01:01.210633 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:01:01.212287 systemd-logind[1317]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:01:01.213454 systemd-logind[1317]: Removed session 32. Oct 2 20:01:01.206000 audit[3455]: CRED_DISP pid=3455 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:01.241415 kernel: audit: type=1106 audit(1696276861.206:1386): pid=3455 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:01.242611 kernel: audit: type=1104 audit(1696276861.206:1387): pid=3455 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:01.242661 kernel: audit: type=1131 audit(1696276861.208:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.19:22-10.200.12.6:60164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:01:01.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.19:22-10.200.12.6:60164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296235 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-run\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296297 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-cgroup\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296331 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-etc-cni-netd\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296334 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296362 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cni-path\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296384 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cni-path" (OuterVolumeSpecName: "cni-path") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296412 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296439 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-bpf-maps\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296438 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296473 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-kernel\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296527 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-22f95\" (UniqueName: \"kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-kube-api-access-22f95\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296563 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-hubble-tls\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296617 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-lib-modules\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296656 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-ipsec-secrets\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296706 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-config-path\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.299626 kubelet[2433]: I1002 20:01:01.296742 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-hostproc\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.296796 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-clustermesh-secrets\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.296829 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-net\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.296877 2433 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-xtables-lock\") pod \"808d1282-d1f3-42ab-9e91-93b5873b3529\" (UID: \"808d1282-d1f3-42ab-9e91-93b5873b3529\") " Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.296939 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-run\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.296963 2433 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-etc-cni-netd\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.296980 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-cgroup\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.297012 2433 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-cni-path\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.297043 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.297074 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.297118 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.297951 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-hostproc" (OuterVolumeSpecName: "hostproc") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.300778 kubelet[2433]: I1002 20:01:01.300124 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.302457 kubelet[2433]: I1002 20:01:01.302431 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:01.303365 kubelet[2433]: I1002 20:01:01.303315 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:01:01.305237 kubelet[2433]: I1002 20:01:01.305212 2433 scope.go:117] "RemoveContainer" containerID="6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea" Oct 2 20:01:01.307400 systemd[1]: var-lib-kubelet-pods-808d1282\x2dd1f3\x2d42ab\x2d9e91\x2d93b5873b3529-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:01:01.310077 env[1336]: time="2023-10-02T20:01:01.307409561Z" level=info msg="RemoveContainer for \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\"" Oct 2 20:01:01.311374 kubelet[2433]: I1002 20:01:01.311343 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:01:01.315682 kubelet[2433]: I1002 20:01:01.313912 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-kube-api-access-22f95" (OuterVolumeSpecName: "kube-api-access-22f95") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "kube-api-access-22f95". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:01:01.314993 systemd[1]: var-lib-kubelet-pods-808d1282\x2dd1f3\x2d42ab\x2d9e91\x2d93b5873b3529-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d22f95.mount: Deactivated successfully. Oct 2 20:01:01.317134 env[1336]: time="2023-10-02T20:01:01.317063593Z" level=info msg="RemoveContainer for \"6dff6e890c95cb653101872bfb69b6c20bea67a2ace038bf5408180f09ec78ea\" returns successfully" Oct 2 20:01:01.320644 systemd[1]: var-lib-kubelet-pods-808d1282\x2dd1f3\x2d42ab\x2d9e91\x2d93b5873b3529-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:01:01.321648 kubelet[2433]: I1002 20:01:01.321397 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:01:01.322172 kubelet[2433]: I1002 20:01:01.322145 2433 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "808d1282-d1f3-42ab-9e91-93b5873b3529" (UID: "808d1282-d1f3-42ab-9e91-93b5873b3529"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:01:01.397460 kubelet[2433]: I1002 20:01:01.397399 2433 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-xtables-lock\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397460 kubelet[2433]: I1002 20:01:01.397454 2433 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-net\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397460 kubelet[2433]: I1002 20:01:01.397471 2433 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-bpf-maps\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397493 2433 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397515 2433 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-22f95\" (UniqueName: \"kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-kube-api-access-22f95\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397530 2433 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/808d1282-d1f3-42ab-9e91-93b5873b3529-hubble-tls\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397544 2433 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-lib-modules\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397562 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-config-path\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397578 2433 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397620 2433 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/808d1282-d1f3-42ab-9e91-93b5873b3529-hostproc\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.397820 kubelet[2433]: I1002 20:01:01.397640 2433 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/808d1282-d1f3-42ab-9e91-93b5873b3529-clustermesh-secrets\") on node \"ci-3510.3.0-a-74431cd9b5\" DevicePath \"\"" Oct 2 20:01:01.609777 systemd[1]: Removed slice kubepods-burstable-pod808d1282_d1f3_42ab_9e91_93b5873b3529.slice. Oct 2 20:01:02.040013 systemd[1]: var-lib-kubelet-pods-808d1282\x2dd1f3\x2d42ab\x2d9e91\x2d93b5873b3529-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:01:02.309686 kubelet[2433]: I1002 20:01:02.309549 2433 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="808d1282-d1f3-42ab-9e91-93b5873b3529" path="/var/lib/kubelet/pods/808d1282-d1f3-42ab-9e91-93b5873b3529/volumes" Oct 2 20:01:03.619921 kubelet[2433]: E1002 20:01:03.619869 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:08.620996 kubelet[2433]: E1002 20:01:08.620963 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:13.622292 kubelet[2433]: E1002 20:01:13.622246 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:14.435014 systemd[1]: cri-containerd-6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f.scope: Deactivated successfully. Oct 2 20:01:14.435403 systemd[1]: cri-containerd-6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f.scope: Consumed 4.829s CPU time. Oct 2 20:01:14.437000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:01:14.445680 kernel: audit: type=1334 audit(1696276874.437:1389): prog-id=77 op=UNLOAD Oct 2 20:01:14.437000 audit: BPF prog-id=98 op=UNLOAD Oct 2 20:01:14.452620 kernel: audit: type=1334 audit(1696276874.437:1390): prog-id=98 op=UNLOAD Oct 2 20:01:14.462955 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f-rootfs.mount: Deactivated successfully. Oct 2 20:01:14.506167 env[1336]: time="2023-10-02T20:01:14.506104146Z" level=info msg="shim disconnected" id=6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f Oct 2 20:01:14.506167 env[1336]: time="2023-10-02T20:01:14.506165647Z" level=warning msg="cleaning up after shim disconnected" id=6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f namespace=k8s.io Oct 2 20:01:14.506167 env[1336]: time="2023-10-02T20:01:14.506177447Z" level=info msg="cleaning up dead shim" Oct 2 20:01:14.514849 env[1336]: time="2023-10-02T20:01:14.514795158Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3719 runtime=io.containerd.runc.v2\n" Oct 2 20:01:15.332604 kubelet[2433]: I1002 20:01:15.332534 2433 scope.go:117] "RemoveContainer" containerID="6d62190c43f51bd564e890d0fb261438b897747014b6c89e6179570ff95c811f" Oct 2 20:01:15.335889 env[1336]: time="2023-10-02T20:01:15.335837541Z" level=info msg="CreateContainer within sandbox \"274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:01:15.367997 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2128431773.mount: Deactivated successfully. Oct 2 20:01:15.378850 env[1336]: time="2023-10-02T20:01:15.378792393Z" level=info msg="CreateContainer within sandbox \"274ddcbca3cb5ac70d77dff3a5422be3c2bf9ba95b88df95884b1fdfa046d666\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"25c2db4ecc4a7d2cfe0c6284a6371d4b665ade1f892fda700e981c0cd247da7e\"" Oct 2 20:01:15.379455 env[1336]: time="2023-10-02T20:01:15.379423001Z" level=info msg="StartContainer for \"25c2db4ecc4a7d2cfe0c6284a6371d4b665ade1f892fda700e981c0cd247da7e\"" Oct 2 20:01:15.397881 systemd[1]: Started cri-containerd-25c2db4ecc4a7d2cfe0c6284a6371d4b665ade1f892fda700e981c0cd247da7e.scope. Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.443334 kernel: audit: type=1400 audit(1696276875.413:1391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.443477 kernel: audit: type=1400 audit(1696276875.413:1392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.470568 kernel: audit: type=1400 audit(1696276875.413:1393): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.470689 kernel: audit: type=1400 audit(1696276875.413:1394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.482963 kernel: audit: type=1400 audit(1696276875.413:1395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.496674 kernel: audit: type=1400 audit(1696276875.413:1396): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.496721 kernel: audit: type=1400 audit(1696276875.413:1397): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.520850 kernel: audit: type=1400 audit(1696276875.413:1398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.413000 audit: BPF prog-id=130 op=LOAD Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2115 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:15.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235633264623465636334613764326366653063363238346136333731 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2115 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:15.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235633264623465636334613764326366653063363238346136333731 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.414000 audit: BPF prog-id=131 op=LOAD Oct 2 20:01:15.414000 audit[3739]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001c4230 items=0 ppid=2115 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:15.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235633264623465636334613764326366653063363238346136333731 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.441000 audit: BPF prog-id=132 op=LOAD Oct 2 20:01:15.441000 audit[3739]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003c0b28 items=0 ppid=2115 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:15.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235633264623465636334613764326366653063363238346136333731 Oct 2 20:01:15.455000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:01:15.455000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { perfmon } for pid=3739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit[3739]: AVC avc: denied { bpf } for pid=3739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:15.455000 audit: BPF prog-id=133 op=LOAD Oct 2 20:01:15.455000 audit[3739]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003c0f38 items=0 ppid=2115 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:15.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235633264623465636334613764326366653063363238346136333731 Oct 2 20:01:15.556048 env[1336]: time="2023-10-02T20:01:15.555952971Z" level=info msg="StartContainer for \"25c2db4ecc4a7d2cfe0c6284a6371d4b665ade1f892fda700e981c0cd247da7e\" returns successfully" Oct 2 20:01:16.314828 kubelet[2433]: E1002 20:01:16.314785 2433 controller.go:193] "Failed to update lease" err="Put \"https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74431cd9b5?timeout=10s\": context deadline exceeded" Oct 2 20:01:16.552000 audit[3750]: AVC avc: denied { watch } for pid=3750 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4868 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:16.552000 audit[3750]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c7bc0 a2=fc6 a3=0 items=0 ppid=2115 pid=3750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:01:16.552000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:16.553000 audit[3750]: AVC avc: denied { watch } for pid=3750 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4853 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:16.553000 audit[3750]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00007a760 a2=fc6 a3=0 items=0 ppid=2115 pid=3750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c847 key=(null) Oct 2 20:01:16.553000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:16.798160 kubelet[2433]: E1002 20:01:16.798122 2433 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.19:49378->10.200.8.13:2379: read: connection timed out" Oct 2 20:01:16.801817 systemd[1]: cri-containerd-08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05.scope: Deactivated successfully. Oct 2 20:01:16.802208 systemd[1]: cri-containerd-08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05.scope: Consumed 2.351s CPU time. Oct 2 20:01:16.805000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:01:16.805000 audit: BPF prog-id=94 op=UNLOAD Oct 2 20:01:16.829365 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05-rootfs.mount: Deactivated successfully. Oct 2 20:01:16.858219 env[1336]: time="2023-10-02T20:01:16.858158674Z" level=info msg="shim disconnected" id=08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05 Oct 2 20:01:16.858219 env[1336]: time="2023-10-02T20:01:16.858215975Z" level=warning msg="cleaning up after shim disconnected" id=08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05 namespace=k8s.io Oct 2 20:01:16.858219 env[1336]: time="2023-10-02T20:01:16.858227675Z" level=info msg="cleaning up dead shim" Oct 2 20:01:16.867163 env[1336]: time="2023-10-02T20:01:16.867104889Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3780 runtime=io.containerd.runc.v2\n" Oct 2 20:01:17.339866 kubelet[2433]: I1002 20:01:17.339828 2433 scope.go:117] "RemoveContainer" containerID="08fe3afb46a9db527d6db96b7f6e2373d7a333531c83893b9567fce0501c2c05" Oct 2 20:01:17.342298 env[1336]: time="2023-10-02T20:01:17.342250359Z" level=info msg="CreateContainer within sandbox \"7124e891c881aab3c95e6dfe447b8f81428902376c236cf29f2c9f211b16704f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:01:17.385156 env[1336]: time="2023-10-02T20:01:17.385098806Z" level=info msg="CreateContainer within sandbox \"7124e891c881aab3c95e6dfe447b8f81428902376c236cf29f2c9f211b16704f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"e10ffa35cbb6178f955b08f44fadcf4e82aa60513f3f089abfbd08605d2974a8\"" Oct 2 20:01:17.385706 env[1336]: time="2023-10-02T20:01:17.385660813Z" level=info msg="StartContainer for \"e10ffa35cbb6178f955b08f44fadcf4e82aa60513f3f089abfbd08605d2974a8\"" Oct 2 20:01:17.402515 systemd[1]: Started cri-containerd-e10ffa35cbb6178f955b08f44fadcf4e82aa60513f3f089abfbd08605d2974a8.scope. Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit: BPF prog-id=134 op=LOAD Oct 2 20:01:17.418000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2164 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:17.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306666613335636262363137386639353562303866343466616463 Oct 2 20:01:17.418000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.418000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2164 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:17.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306666613335636262363137386639353562303866343466616463 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit: BPF prog-id=135 op=LOAD Oct 2 20:01:17.419000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000263f80 items=0 ppid=2164 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:17.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306666613335636262363137386639353562303866343466616463 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit: BPF prog-id=136 op=LOAD Oct 2 20:01:17.419000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000263fc8 items=0 ppid=2164 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:17.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306666613335636262363137386639353562303866343466616463 Oct 2 20:01:17.419000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:01:17.419000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:17.419000 audit: BPF prog-id=137 op=LOAD Oct 2 20:01:17.419000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003403d8 items=0 ppid=2164 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:17.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306666613335636262363137386639353562303866343466616463 Oct 2 20:01:17.459936 env[1336]: time="2023-10-02T20:01:17.459860960Z" level=info msg="StartContainer for \"e10ffa35cbb6178f955b08f44fadcf4e82aa60513f3f089abfbd08605d2974a8\" returns successfully" Oct 2 20:01:18.623747 kubelet[2433]: E1002 20:01:18.623712 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:19.033977 kubelet[2433]: E1002 20:01:19.033738 2433 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-74431cd9b5.178a62d3203fad59", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-74431cd9b5", UID:"9f488878691ca48a7b8d409e41015ae3", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-74431cd9b5"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 1, 8, 577078617, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 1, 8, 577078617, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-74431cd9b5"}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.19:49182->10.200.8.13:2379: read: connection timed out' (will not retry!) Oct 2 20:01:23.625225 kubelet[2433]: E1002 20:01:23.625183 2433 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:25.753844 kubelet[2433]: I1002 20:01:25.753788 2433 status_manager.go:853] "Failed to get status for pod" podUID="5642080e4c1fe57851780e7074ce3fb6" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74431cd9b5" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.19:49286->10.200.8.13:2379: read: connection timed out"