Oct 2 19:20:31.549776 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:20:31.549789 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:20:31.549796 kernel: BIOS-provided physical RAM map: Oct 2 19:20:31.549800 kernel: BIOS-e820: [mem 0x0000000000000000-0x00000000000997ff] usable Oct 2 19:20:31.549803 kernel: BIOS-e820: [mem 0x0000000000099800-0x000000000009ffff] reserved Oct 2 19:20:31.549807 kernel: BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved Oct 2 19:20:31.549811 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003fffffff] usable Oct 2 19:20:31.549815 kernel: BIOS-e820: [mem 0x0000000040000000-0x00000000403fffff] reserved Oct 2 19:20:31.549819 kernel: BIOS-e820: [mem 0x0000000040400000-0x000000008247afff] usable Oct 2 19:20:31.549822 kernel: BIOS-e820: [mem 0x000000008247b000-0x000000008247bfff] ACPI NVS Oct 2 19:20:31.549827 kernel: BIOS-e820: [mem 0x000000008247c000-0x000000008247cfff] reserved Oct 2 19:20:31.549831 kernel: BIOS-e820: [mem 0x000000008247d000-0x000000008afccfff] usable Oct 2 19:20:31.549834 kernel: BIOS-e820: [mem 0x000000008afcd000-0x000000008c0b1fff] reserved Oct 2 19:20:31.549838 kernel: BIOS-e820: [mem 0x000000008c0b2000-0x000000008c23afff] usable Oct 2 19:20:31.549843 kernel: BIOS-e820: [mem 0x000000008c23b000-0x000000008c66cfff] ACPI NVS Oct 2 19:20:31.549848 kernel: BIOS-e820: [mem 0x000000008c66d000-0x000000008eefefff] reserved Oct 2 19:20:31.549852 kernel: BIOS-e820: [mem 0x000000008eeff000-0x000000008eefffff] usable Oct 2 19:20:31.549856 kernel: BIOS-e820: [mem 0x000000008ef00000-0x000000008fffffff] reserved Oct 2 19:20:31.549860 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved Oct 2 19:20:31.549864 kernel: BIOS-e820: [mem 0x00000000fe000000-0x00000000fe010fff] reserved Oct 2 19:20:31.549868 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved Oct 2 19:20:31.549872 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Oct 2 19:20:31.549876 kernel: BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved Oct 2 19:20:31.549880 kernel: BIOS-e820: [mem 0x0000000100000000-0x000000086effffff] usable Oct 2 19:20:31.549884 kernel: NX (Execute Disable) protection: active Oct 2 19:20:31.549888 kernel: SMBIOS 3.2.1 present. Oct 2 19:20:31.549893 kernel: DMI: Supermicro SYS-5019C-MR/X11SCM-F, BIOS 1.9 09/16/2022 Oct 2 19:20:31.549897 kernel: tsc: Detected 3400.000 MHz processor Oct 2 19:20:31.549901 kernel: tsc: Detected 3399.906 MHz TSC Oct 2 19:20:31.549905 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:20:31.549910 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:20:31.549914 kernel: last_pfn = 0x86f000 max_arch_pfn = 0x400000000 Oct 2 19:20:31.549918 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:20:31.549923 kernel: last_pfn = 0x8ef00 max_arch_pfn = 0x400000000 Oct 2 19:20:31.549927 kernel: Using GB pages for direct mapping Oct 2 19:20:31.549931 kernel: ACPI: Early table checksum verification disabled Oct 2 19:20:31.549936 kernel: ACPI: RSDP 0x00000000000F05B0 000024 (v02 SUPERM) Oct 2 19:20:31.549940 kernel: ACPI: XSDT 0x000000008C54E0C8 00010C (v01 SUPERM SUPERM 01072009 AMI 00010013) Oct 2 19:20:31.549944 kernel: ACPI: FACP 0x000000008C58A670 000114 (v06 01072009 AMI 00010013) Oct 2 19:20:31.549948 kernel: ACPI: DSDT 0x000000008C54E268 03C404 (v02 SUPERM SMCI--MB 01072009 INTL 20160527) Oct 2 19:20:31.549954 kernel: ACPI: FACS 0x000000008C66CF80 000040 Oct 2 19:20:31.549959 kernel: ACPI: APIC 0x000000008C58A788 00012C (v04 01072009 AMI 00010013) Oct 2 19:20:31.549964 kernel: ACPI: FPDT 0x000000008C58A8B8 000044 (v01 01072009 AMI 00010013) Oct 2 19:20:31.549969 kernel: ACPI: FIDT 0x000000008C58A900 00009C (v01 SUPERM SMCI--MB 01072009 AMI 00010013) Oct 2 19:20:31.549973 kernel: ACPI: MCFG 0x000000008C58A9A0 00003C (v01 SUPERM SMCI--MB 01072009 MSFT 00000097) Oct 2 19:20:31.549978 kernel: ACPI: SPMI 0x000000008C58A9E0 000041 (v05 SUPERM SMCI--MB 00000000 AMI. 00000000) Oct 2 19:20:31.549982 kernel: ACPI: SSDT 0x000000008C58AA28 001B1C (v02 CpuRef CpuSsdt 00003000 INTL 20160527) Oct 2 19:20:31.549987 kernel: ACPI: SSDT 0x000000008C58C548 0031C6 (v02 SaSsdt SaSsdt 00003000 INTL 20160527) Oct 2 19:20:31.549991 kernel: ACPI: SSDT 0x000000008C58F710 00232B (v02 PegSsd PegSsdt 00001000 INTL 20160527) Oct 2 19:20:31.549996 kernel: ACPI: HPET 0x000000008C591A40 000038 (v01 SUPERM SMCI--MB 00000002 01000013) Oct 2 19:20:31.550001 kernel: ACPI: SSDT 0x000000008C591A78 000FAE (v02 SUPERM Ther_Rvp 00001000 INTL 20160527) Oct 2 19:20:31.550005 kernel: ACPI: SSDT 0x000000008C592A28 0008F4 (v02 INTEL xh_mossb 00000000 INTL 20160527) Oct 2 19:20:31.550010 kernel: ACPI: UEFI 0x000000008C593320 000042 (v01 SUPERM SMCI--MB 00000002 01000013) Oct 2 19:20:31.550014 kernel: ACPI: LPIT 0x000000008C593368 000094 (v01 SUPERM SMCI--MB 00000002 01000013) Oct 2 19:20:31.550019 kernel: ACPI: SSDT 0x000000008C593400 0027DE (v02 SUPERM PtidDevc 00001000 INTL 20160527) Oct 2 19:20:31.550023 kernel: ACPI: SSDT 0x000000008C595BE0 0014E2 (v02 SUPERM TbtTypeC 00000000 INTL 20160527) Oct 2 19:20:31.550028 kernel: ACPI: DBGP 0x000000008C5970C8 000034 (v01 SUPERM SMCI--MB 00000002 01000013) Oct 2 19:20:31.550032 kernel: ACPI: DBG2 0x000000008C597100 000054 (v00 SUPERM SMCI--MB 00000002 01000013) Oct 2 19:20:31.550037 kernel: ACPI: SSDT 0x000000008C597158 001B67 (v02 SUPERM UsbCTabl 00001000 INTL 20160527) Oct 2 19:20:31.550042 kernel: ACPI: DMAR 0x000000008C598CC0 000070 (v01 INTEL EDK2 00000002 01000013) Oct 2 19:20:31.550047 kernel: ACPI: SSDT 0x000000008C598D30 000144 (v02 Intel ADebTabl 00001000 INTL 20160527) Oct 2 19:20:31.550051 kernel: ACPI: TPM2 0x000000008C598E78 000034 (v04 SUPERM SMCI--MB 00000001 AMI 00000000) Oct 2 19:20:31.550055 kernel: ACPI: SSDT 0x000000008C598EB0 000D8F (v02 INTEL SpsNm 00000002 INTL 20160527) Oct 2 19:20:31.550060 kernel: ACPI: WSMT 0x000000008C599C40 000028 (v01 SUPERM 01072009 AMI 00010013) Oct 2 19:20:31.550064 kernel: ACPI: EINJ 0x000000008C599C68 000130 (v01 AMI AMI.EINJ 00000000 AMI. 00000000) Oct 2 19:20:31.550069 kernel: ACPI: ERST 0x000000008C599D98 000230 (v01 AMIER AMI.ERST 00000000 AMI. 00000000) Oct 2 19:20:31.550073 kernel: ACPI: BERT 0x000000008C599FC8 000030 (v01 AMI AMI.BERT 00000000 AMI. 00000000) Oct 2 19:20:31.550079 kernel: ACPI: HEST 0x000000008C599FF8 00027C (v01 AMI AMI.HEST 00000000 AMI. 00000000) Oct 2 19:20:31.550083 kernel: ACPI: SSDT 0x000000008C59A278 000162 (v01 SUPERM SMCCDN 00000000 INTL 20181221) Oct 2 19:20:31.550088 kernel: ACPI: Reserving FACP table memory at [mem 0x8c58a670-0x8c58a783] Oct 2 19:20:31.550092 kernel: ACPI: Reserving DSDT table memory at [mem 0x8c54e268-0x8c58a66b] Oct 2 19:20:31.550097 kernel: ACPI: Reserving FACS table memory at [mem 0x8c66cf80-0x8c66cfbf] Oct 2 19:20:31.550101 kernel: ACPI: Reserving APIC table memory at [mem 0x8c58a788-0x8c58a8b3] Oct 2 19:20:31.550106 kernel: ACPI: Reserving FPDT table memory at [mem 0x8c58a8b8-0x8c58a8fb] Oct 2 19:20:31.550110 kernel: ACPI: Reserving FIDT table memory at [mem 0x8c58a900-0x8c58a99b] Oct 2 19:20:31.550115 kernel: ACPI: Reserving MCFG table memory at [mem 0x8c58a9a0-0x8c58a9db] Oct 2 19:20:31.550120 kernel: ACPI: Reserving SPMI table memory at [mem 0x8c58a9e0-0x8c58aa20] Oct 2 19:20:31.550124 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58aa28-0x8c58c543] Oct 2 19:20:31.550129 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58c548-0x8c58f70d] Oct 2 19:20:31.550133 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58f710-0x8c591a3a] Oct 2 19:20:31.550138 kernel: ACPI: Reserving HPET table memory at [mem 0x8c591a40-0x8c591a77] Oct 2 19:20:31.550142 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c591a78-0x8c592a25] Oct 2 19:20:31.550147 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c592a28-0x8c59331b] Oct 2 19:20:31.550151 kernel: ACPI: Reserving UEFI table memory at [mem 0x8c593320-0x8c593361] Oct 2 19:20:31.550156 kernel: ACPI: Reserving LPIT table memory at [mem 0x8c593368-0x8c5933fb] Oct 2 19:20:31.550161 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c593400-0x8c595bdd] Oct 2 19:20:31.550165 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c595be0-0x8c5970c1] Oct 2 19:20:31.550170 kernel: ACPI: Reserving DBGP table memory at [mem 0x8c5970c8-0x8c5970fb] Oct 2 19:20:31.550174 kernel: ACPI: Reserving DBG2 table memory at [mem 0x8c597100-0x8c597153] Oct 2 19:20:31.550179 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c597158-0x8c598cbe] Oct 2 19:20:31.550183 kernel: ACPI: Reserving DMAR table memory at [mem 0x8c598cc0-0x8c598d2f] Oct 2 19:20:31.550188 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c598d30-0x8c598e73] Oct 2 19:20:31.550192 kernel: ACPI: Reserving TPM2 table memory at [mem 0x8c598e78-0x8c598eab] Oct 2 19:20:31.550197 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c598eb0-0x8c599c3e] Oct 2 19:20:31.550202 kernel: ACPI: Reserving WSMT table memory at [mem 0x8c599c40-0x8c599c67] Oct 2 19:20:31.550206 kernel: ACPI: Reserving EINJ table memory at [mem 0x8c599c68-0x8c599d97] Oct 2 19:20:31.550211 kernel: ACPI: Reserving ERST table memory at [mem 0x8c599d98-0x8c599fc7] Oct 2 19:20:31.550215 kernel: ACPI: Reserving BERT table memory at [mem 0x8c599fc8-0x8c599ff7] Oct 2 19:20:31.550220 kernel: ACPI: Reserving HEST table memory at [mem 0x8c599ff8-0x8c59a273] Oct 2 19:20:31.550224 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c59a278-0x8c59a3d9] Oct 2 19:20:31.550229 kernel: No NUMA configuration found Oct 2 19:20:31.550233 kernel: Faking a node at [mem 0x0000000000000000-0x000000086effffff] Oct 2 19:20:31.550239 kernel: NODE_DATA(0) allocated [mem 0x86effa000-0x86effffff] Oct 2 19:20:31.550243 kernel: Zone ranges: Oct 2 19:20:31.550248 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:20:31.550252 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:20:31.550257 kernel: Normal [mem 0x0000000100000000-0x000000086effffff] Oct 2 19:20:31.550261 kernel: Movable zone start for each node Oct 2 19:20:31.550266 kernel: Early memory node ranges Oct 2 19:20:31.550270 kernel: node 0: [mem 0x0000000000001000-0x0000000000098fff] Oct 2 19:20:31.550275 kernel: node 0: [mem 0x0000000000100000-0x000000003fffffff] Oct 2 19:20:31.550279 kernel: node 0: [mem 0x0000000040400000-0x000000008247afff] Oct 2 19:20:31.550284 kernel: node 0: [mem 0x000000008247d000-0x000000008afccfff] Oct 2 19:20:31.550289 kernel: node 0: [mem 0x000000008c0b2000-0x000000008c23afff] Oct 2 19:20:31.550293 kernel: node 0: [mem 0x000000008eeff000-0x000000008eefffff] Oct 2 19:20:31.550298 kernel: node 0: [mem 0x0000000100000000-0x000000086effffff] Oct 2 19:20:31.550302 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000086effffff] Oct 2 19:20:31.550307 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:20:31.550315 kernel: On node 0, zone DMA: 103 pages in unavailable ranges Oct 2 19:20:31.550320 kernel: On node 0, zone DMA32: 1024 pages in unavailable ranges Oct 2 19:20:31.550325 kernel: On node 0, zone DMA32: 2 pages in unavailable ranges Oct 2 19:20:31.550330 kernel: On node 0, zone DMA32: 4325 pages in unavailable ranges Oct 2 19:20:31.550335 kernel: On node 0, zone DMA32: 11460 pages in unavailable ranges Oct 2 19:20:31.550340 kernel: On node 0, zone Normal: 4352 pages in unavailable ranges Oct 2 19:20:31.550345 kernel: On node 0, zone Normal: 4096 pages in unavailable ranges Oct 2 19:20:31.550350 kernel: ACPI: PM-Timer IO Port: 0x1808 Oct 2 19:20:31.550355 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Oct 2 19:20:31.550360 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Oct 2 19:20:31.550364 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Oct 2 19:20:31.550370 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Oct 2 19:20:31.550375 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Oct 2 19:20:31.550379 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Oct 2 19:20:31.550384 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Oct 2 19:20:31.550389 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Oct 2 19:20:31.550394 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Oct 2 19:20:31.550399 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Oct 2 19:20:31.550403 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Oct 2 19:20:31.550408 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Oct 2 19:20:31.550414 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Oct 2 19:20:31.550418 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Oct 2 19:20:31.550423 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Oct 2 19:20:31.550428 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Oct 2 19:20:31.550433 kernel: IOAPIC[0]: apic_id 2, version 32, address 0xfec00000, GSI 0-119 Oct 2 19:20:31.550437 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:20:31.550442 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:20:31.550447 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:20:31.550452 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:20:31.550457 kernel: TSC deadline timer available Oct 2 19:20:31.550462 kernel: smpboot: Allowing 16 CPUs, 0 hotplug CPUs Oct 2 19:20:31.550467 kernel: [mem 0x90000000-0xdfffffff] available for PCI devices Oct 2 19:20:31.550472 kernel: Booting paravirtualized kernel on bare hardware Oct 2 19:20:31.550477 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:20:31.550482 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:16 nr_node_ids:1 Oct 2 19:20:31.550506 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u262144 Oct 2 19:20:31.550511 kernel: pcpu-alloc: s185624 r8192 d31464 u262144 alloc=1*2097152 Oct 2 19:20:31.550516 kernel: pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 12 13 14 15 Oct 2 19:20:31.550522 kernel: Built 1 zonelists, mobility grouping on. Total pages: 8232415 Oct 2 19:20:31.550527 kernel: Policy zone: Normal Oct 2 19:20:31.550532 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:20:31.550551 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:20:31.550556 kernel: Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes, linear) Oct 2 19:20:31.550560 kernel: Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear) Oct 2 19:20:31.550565 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:20:31.550570 kernel: Memory: 32724720K/33452980K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 728000K reserved, 0K cma-reserved) Oct 2 19:20:31.550576 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=16, Nodes=1 Oct 2 19:20:31.550581 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:20:31.550586 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:20:31.550591 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:20:31.550596 kernel: rcu: RCU event tracing is enabled. Oct 2 19:20:31.550601 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=16. Oct 2 19:20:31.550606 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:20:31.550611 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:20:31.550616 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:20:31.550622 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=16 Oct 2 19:20:31.550626 kernel: NR_IRQS: 33024, nr_irqs: 2184, preallocated irqs: 16 Oct 2 19:20:31.550631 kernel: random: crng init done Oct 2 19:20:31.550636 kernel: Console: colour dummy device 80x25 Oct 2 19:20:31.550641 kernel: printk: console [tty0] enabled Oct 2 19:20:31.550646 kernel: printk: console [ttyS1] enabled Oct 2 19:20:31.550650 kernel: ACPI: Core revision 20210730 Oct 2 19:20:31.550655 kernel: hpet: HPET dysfunctional in PC10. Force disabled. Oct 2 19:20:31.550660 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:20:31.550666 kernel: DMAR: Host address width 39 Oct 2 19:20:31.550670 kernel: DMAR: DRHD base: 0x000000fed91000 flags: 0x1 Oct 2 19:20:31.550675 kernel: DMAR: dmar0: reg_base_addr fed91000 ver 1:0 cap d2008c40660462 ecap f050da Oct 2 19:20:31.550680 kernel: DMAR: RMRR base: 0x0000008cf18000 end: 0x0000008d161fff Oct 2 19:20:31.550685 kernel: DMAR-IR: IOAPIC id 2 under DRHD base 0xfed91000 IOMMU 0 Oct 2 19:20:31.550690 kernel: DMAR-IR: HPET id 0 under DRHD base 0xfed91000 Oct 2 19:20:31.550695 kernel: DMAR-IR: Queued invalidation will be enabled to support x2apic and Intr-remapping. Oct 2 19:20:31.550699 kernel: DMAR-IR: Enabled IRQ remapping in x2apic mode Oct 2 19:20:31.550704 kernel: x2apic enabled Oct 2 19:20:31.550710 kernel: Switched APIC routing to cluster x2apic. Oct 2 19:20:31.550715 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x3101f59f5e6, max_idle_ns: 440795259996 ns Oct 2 19:20:31.550720 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 6799.81 BogoMIPS (lpj=3399906) Oct 2 19:20:31.550724 kernel: CPU0: Thermal monitoring enabled (TM1) Oct 2 19:20:31.550729 kernel: process: using mwait in idle threads Oct 2 19:20:31.550734 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:20:31.550739 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:20:31.550743 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:20:31.550748 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Oct 2 19:20:31.550754 kernel: Spectre V2 : Mitigation: Enhanced IBRS Oct 2 19:20:31.550759 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:20:31.550763 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Oct 2 19:20:31.550768 kernel: RETBleed: Mitigation: Enhanced IBRS Oct 2 19:20:31.550773 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:20:31.550778 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:20:31.550782 kernel: TAA: Mitigation: TSX disabled Oct 2 19:20:31.550787 kernel: MMIO Stale Data: Mitigation: Clear CPU buffers Oct 2 19:20:31.550792 kernel: SRBDS: Mitigation: Microcode Oct 2 19:20:31.550797 kernel: GDS: Vulnerable: No microcode Oct 2 19:20:31.550801 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:20:31.550807 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:20:31.550812 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:20:31.550816 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 19:20:31.550821 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 19:20:31.550826 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:20:31.550831 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 19:20:31.550835 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 19:20:31.550840 kernel: x86/fpu: Enabled xstate features 0x1f, context size is 960 bytes, using 'compacted' format. Oct 2 19:20:31.550845 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:20:31.550849 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:20:31.550854 kernel: LSM: Security Framework initializing Oct 2 19:20:31.550859 kernel: SELinux: Initializing. Oct 2 19:20:31.550864 kernel: Mount-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:20:31.550869 kernel: Mountpoint-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:20:31.550874 kernel: smpboot: Estimated ratio of average max frequency by base frequency (times 1024): 1445 Oct 2 19:20:31.550879 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Oct 2 19:20:31.550884 kernel: Performance Events: PEBS fmt3+, Skylake events, 32-deep LBR, full-width counters, Intel PMU driver. Oct 2 19:20:31.550888 kernel: ... version: 4 Oct 2 19:20:31.550893 kernel: ... bit width: 48 Oct 2 19:20:31.550898 kernel: ... generic registers: 4 Oct 2 19:20:31.550903 kernel: ... value mask: 0000ffffffffffff Oct 2 19:20:31.550908 kernel: ... max period: 00007fffffffffff Oct 2 19:20:31.550913 kernel: ... fixed-purpose events: 3 Oct 2 19:20:31.550918 kernel: ... event mask: 000000070000000f Oct 2 19:20:31.550923 kernel: signal: max sigframe size: 2032 Oct 2 19:20:31.550928 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:20:31.550933 kernel: NMI watchdog: Enabled. Permanently consumes one hw-PMU counter. Oct 2 19:20:31.550937 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:20:31.550942 kernel: x86: Booting SMP configuration: Oct 2 19:20:31.550947 kernel: .... node #0, CPUs: #1 #2 #3 #4 #5 #6 #7 #8 Oct 2 19:20:31.550952 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:20:31.550958 kernel: #9 #10 #11 #12 #13 #14 #15 Oct 2 19:20:31.550962 kernel: smp: Brought up 1 node, 16 CPUs Oct 2 19:20:31.550967 kernel: smpboot: Max logical packages: 1 Oct 2 19:20:31.550972 kernel: smpboot: Total of 16 processors activated (108796.99 BogoMIPS) Oct 2 19:20:31.550977 kernel: devtmpfs: initialized Oct 2 19:20:31.550982 kernel: x86/mm: Memory block size: 128MB Oct 2 19:20:31.550986 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x8247b000-0x8247bfff] (4096 bytes) Oct 2 19:20:31.550991 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x8c23b000-0x8c66cfff] (4399104 bytes) Oct 2 19:20:31.550997 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:20:31.551002 kernel: futex hash table entries: 4096 (order: 6, 262144 bytes, linear) Oct 2 19:20:31.551006 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:20:31.551011 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:20:31.551016 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:20:31.551021 kernel: audit: type=2000 audit(1696274426.040:1): state=initialized audit_enabled=0 res=1 Oct 2 19:20:31.551025 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:20:31.551030 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:20:31.551035 kernel: cpuidle: using governor menu Oct 2 19:20:31.551041 kernel: ACPI: bus type PCI registered Oct 2 19:20:31.551045 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:20:31.551050 kernel: dca service started, version 1.12.1 Oct 2 19:20:31.551055 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xe0000000-0xefffffff] (base 0xe0000000) Oct 2 19:20:31.551060 kernel: PCI: MMCONFIG at [mem 0xe0000000-0xefffffff] reserved in E820 Oct 2 19:20:31.551065 kernel: PCI: Using configuration type 1 for base access Oct 2 19:20:31.551070 kernel: ENERGY_PERF_BIAS: Set to 'normal', was 'performance' Oct 2 19:20:31.551074 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:20:31.551079 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:20:31.551085 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:20:31.551089 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:20:31.551094 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:20:31.551099 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:20:31.551104 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:20:31.551109 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:20:31.551113 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:20:31.551118 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:20:31.551123 kernel: ACPI: 12 ACPI AML tables successfully acquired and loaded Oct 2 19:20:31.551129 kernel: ACPI: Dynamic OEM Table Load: Oct 2 19:20:31.551133 kernel: ACPI: SSDT 0xFFFF93594020E300 0000F4 (v02 PmRef Cpu0Psd 00003000 INTL 20160527) Oct 2 19:20:31.551138 kernel: ACPI: \_SB_.PR00: _OSC native thermal LVT Acked Oct 2 19:20:31.551143 kernel: ACPI: Dynamic OEM Table Load: Oct 2 19:20:31.551148 kernel: ACPI: SSDT 0xFFFF935941AE6800 000400 (v02 PmRef Cpu0Cst 00003001 INTL 20160527) Oct 2 19:20:31.551153 kernel: ACPI: Dynamic OEM Table Load: Oct 2 19:20:31.551157 kernel: ACPI: SSDT 0xFFFF935941A56800 000683 (v02 PmRef Cpu0Ist 00003000 INTL 20160527) Oct 2 19:20:31.551162 kernel: ACPI: Dynamic OEM Table Load: Oct 2 19:20:31.551167 kernel: ACPI: SSDT 0xFFFF935941A57800 0005FC (v02 PmRef ApIst 00003000 INTL 20160527) Oct 2 19:20:31.551172 kernel: ACPI: Dynamic OEM Table Load: Oct 2 19:20:31.551177 kernel: ACPI: SSDT 0xFFFF935940148000 000AB0 (v02 PmRef ApPsd 00003000 INTL 20160527) Oct 2 19:20:31.551182 kernel: ACPI: Dynamic OEM Table Load: Oct 2 19:20:31.551187 kernel: ACPI: SSDT 0xFFFF935941AE5000 00030A (v02 PmRef ApCst 00003000 INTL 20160527) Oct 2 19:20:31.551192 kernel: ACPI: Interpreter enabled Oct 2 19:20:31.551196 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:20:31.551201 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:20:31.551206 kernel: HEST: Enabling Firmware First mode for corrected errors. Oct 2 19:20:31.551211 kernel: mce: [Firmware Bug]: Ignoring request to disable invalid MCA bank 14. Oct 2 19:20:31.551215 kernel: HEST: Table parsing has been initialized. Oct 2 19:20:31.551221 kernel: GHES: APEI firmware first mode is enabled by APEI bit and WHEA _OSC. Oct 2 19:20:31.551226 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:20:31.551231 kernel: ACPI: Enabled 9 GPEs in block 00 to 7F Oct 2 19:20:31.551235 kernel: ACPI: PM: Power Resource [USBC] Oct 2 19:20:31.551240 kernel: ACPI: PM: Power Resource [V0PR] Oct 2 19:20:31.551245 kernel: ACPI: PM: Power Resource [V1PR] Oct 2 19:20:31.551250 kernel: ACPI: PM: Power Resource [V2PR] Oct 2 19:20:31.551254 kernel: ACPI: PM: Power Resource [WRST] Oct 2 19:20:31.551259 kernel: ACPI: PM: Power Resource [FN00] Oct 2 19:20:31.551265 kernel: ACPI: PM: Power Resource [FN01] Oct 2 19:20:31.551269 kernel: ACPI: PM: Power Resource [FN02] Oct 2 19:20:31.551274 kernel: ACPI: PM: Power Resource [FN03] Oct 2 19:20:31.551279 kernel: ACPI: PM: Power Resource [FN04] Oct 2 19:20:31.551284 kernel: ACPI: PM: Power Resource [PIN] Oct 2 19:20:31.551289 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-fe]) Oct 2 19:20:31.551352 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:20:31.551396 kernel: acpi PNP0A08:00: _OSC: platform does not support [AER] Oct 2 19:20:31.551437 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability LTR] Oct 2 19:20:31.551444 kernel: PCI host bridge to bus 0000:00 Oct 2 19:20:31.551488 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:20:31.551562 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:20:31.551598 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:20:31.551633 kernel: pci_bus 0000:00: root bus resource [mem 0x90000000-0xdfffffff window] Oct 2 19:20:31.551668 kernel: pci_bus 0000:00: root bus resource [mem 0xfc800000-0xfe7fffff window] Oct 2 19:20:31.551704 kernel: pci_bus 0000:00: root bus resource [bus 00-fe] Oct 2 19:20:31.551753 kernel: pci 0000:00:00.0: [8086:3e31] type 00 class 0x060000 Oct 2 19:20:31.551801 kernel: pci 0000:00:01.0: [8086:1901] type 01 class 0x060400 Oct 2 19:20:31.551843 kernel: pci 0000:00:01.0: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.551887 kernel: pci 0000:00:08.0: [8086:1911] type 00 class 0x088000 Oct 2 19:20:31.551928 kernel: pci 0000:00:08.0: reg 0x10: [mem 0x9551f000-0x9551ffff 64bit] Oct 2 19:20:31.551974 kernel: pci 0000:00:12.0: [8086:a379] type 00 class 0x118000 Oct 2 19:20:31.552015 kernel: pci 0000:00:12.0: reg 0x10: [mem 0x9551e000-0x9551efff 64bit] Oct 2 19:20:31.552059 kernel: pci 0000:00:14.0: [8086:a36d] type 00 class 0x0c0330 Oct 2 19:20:31.552100 kernel: pci 0000:00:14.0: reg 0x10: [mem 0x95500000-0x9550ffff 64bit] Oct 2 19:20:31.552141 kernel: pci 0000:00:14.0: PME# supported from D3hot D3cold Oct 2 19:20:31.552185 kernel: pci 0000:00:14.2: [8086:a36f] type 00 class 0x050000 Oct 2 19:20:31.552227 kernel: pci 0000:00:14.2: reg 0x10: [mem 0x95512000-0x95513fff 64bit] Oct 2 19:20:31.552268 kernel: pci 0000:00:14.2: reg 0x18: [mem 0x9551d000-0x9551dfff 64bit] Oct 2 19:20:31.552310 kernel: pci 0000:00:15.0: [8086:a368] type 00 class 0x0c8000 Oct 2 19:20:31.552351 kernel: pci 0000:00:15.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Oct 2 19:20:31.552397 kernel: pci 0000:00:15.1: [8086:a369] type 00 class 0x0c8000 Oct 2 19:20:31.552438 kernel: pci 0000:00:15.1: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Oct 2 19:20:31.552481 kernel: pci 0000:00:16.0: [8086:a360] type 00 class 0x078000 Oct 2 19:20:31.552555 kernel: pci 0000:00:16.0: reg 0x10: [mem 0x9551a000-0x9551afff 64bit] Oct 2 19:20:31.552596 kernel: pci 0000:00:16.0: PME# supported from D3hot Oct 2 19:20:31.552639 kernel: pci 0000:00:16.1: [8086:a361] type 00 class 0x078000 Oct 2 19:20:31.552679 kernel: pci 0000:00:16.1: reg 0x10: [mem 0x95519000-0x95519fff 64bit] Oct 2 19:20:31.552718 kernel: pci 0000:00:16.1: PME# supported from D3hot Oct 2 19:20:31.552761 kernel: pci 0000:00:16.4: [8086:a364] type 00 class 0x078000 Oct 2 19:20:31.552802 kernel: pci 0000:00:16.4: reg 0x10: [mem 0x95518000-0x95518fff 64bit] Oct 2 19:20:31.552842 kernel: pci 0000:00:16.4: PME# supported from D3hot Oct 2 19:20:31.552884 kernel: pci 0000:00:17.0: [8086:a352] type 00 class 0x010601 Oct 2 19:20:31.552923 kernel: pci 0000:00:17.0: reg 0x10: [mem 0x95510000-0x95511fff] Oct 2 19:20:31.552963 kernel: pci 0000:00:17.0: reg 0x14: [mem 0x95517000-0x955170ff] Oct 2 19:20:31.553002 kernel: pci 0000:00:17.0: reg 0x18: [io 0x6050-0x6057] Oct 2 19:20:31.553042 kernel: pci 0000:00:17.0: reg 0x1c: [io 0x6040-0x6043] Oct 2 19:20:31.553087 kernel: pci 0000:00:17.0: reg 0x20: [io 0x6020-0x603f] Oct 2 19:20:31.553129 kernel: pci 0000:00:17.0: reg 0x24: [mem 0x95516000-0x955167ff] Oct 2 19:20:31.553168 kernel: pci 0000:00:17.0: PME# supported from D3hot Oct 2 19:20:31.553210 kernel: pci 0000:00:1b.0: [8086:a340] type 01 class 0x060400 Oct 2 19:20:31.553252 kernel: pci 0000:00:1b.0: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.553295 kernel: pci 0000:00:1b.4: [8086:a32c] type 01 class 0x060400 Oct 2 19:20:31.553337 kernel: pci 0000:00:1b.4: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.553384 kernel: pci 0000:00:1b.5: [8086:a32d] type 01 class 0x060400 Oct 2 19:20:31.553427 kernel: pci 0000:00:1b.5: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.553471 kernel: pci 0000:00:1c.0: [8086:a338] type 01 class 0x060400 Oct 2 19:20:31.553545 kernel: pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.553589 kernel: pci 0000:00:1c.3: [8086:a33b] type 01 class 0x060400 Oct 2 19:20:31.553631 kernel: pci 0000:00:1c.3: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.553675 kernel: pci 0000:00:1e.0: [8086:a328] type 00 class 0x078000 Oct 2 19:20:31.553714 kernel: pci 0000:00:1e.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Oct 2 19:20:31.553759 kernel: pci 0000:00:1f.0: [8086:a309] type 00 class 0x060100 Oct 2 19:20:31.553804 kernel: pci 0000:00:1f.4: [8086:a323] type 00 class 0x0c0500 Oct 2 19:20:31.553845 kernel: pci 0000:00:1f.4: reg 0x10: [mem 0x95514000-0x955140ff 64bit] Oct 2 19:20:31.553885 kernel: pci 0000:00:1f.4: reg 0x20: [io 0xefa0-0xefbf] Oct 2 19:20:31.553931 kernel: pci 0000:00:1f.5: [8086:a324] type 00 class 0x0c8000 Oct 2 19:20:31.553971 kernel: pci 0000:00:1f.5: reg 0x10: [mem 0xfe010000-0xfe010fff] Oct 2 19:20:31.554017 kernel: pci 0000:01:00.0: [15b3:1015] type 00 class 0x020000 Oct 2 19:20:31.554062 kernel: pci 0000:01:00.0: reg 0x10: [mem 0x92000000-0x93ffffff 64bit pref] Oct 2 19:20:31.554105 kernel: pci 0000:01:00.0: reg 0x30: [mem 0x95200000-0x952fffff pref] Oct 2 19:20:31.554147 kernel: pci 0000:01:00.0: PME# supported from D3cold Oct 2 19:20:31.554188 kernel: pci 0000:01:00.0: reg 0x1a4: [mem 0x00000000-0x000fffff 64bit pref] Oct 2 19:20:31.554230 kernel: pci 0000:01:00.0: VF(n) BAR0 space: [mem 0x00000000-0x007fffff 64bit pref] (contains BAR0 for 8 VFs) Oct 2 19:20:31.554275 kernel: pci 0000:01:00.1: [15b3:1015] type 00 class 0x020000 Oct 2 19:20:31.554317 kernel: pci 0000:01:00.1: reg 0x10: [mem 0x90000000-0x91ffffff 64bit pref] Oct 2 19:20:31.554360 kernel: pci 0000:01:00.1: reg 0x30: [mem 0x95100000-0x951fffff pref] Oct 2 19:20:31.554402 kernel: pci 0000:01:00.1: PME# supported from D3cold Oct 2 19:20:31.554443 kernel: pci 0000:01:00.1: reg 0x1a4: [mem 0x00000000-0x000fffff 64bit pref] Oct 2 19:20:31.554486 kernel: pci 0000:01:00.1: VF(n) BAR0 space: [mem 0x00000000-0x007fffff 64bit pref] (contains BAR0 for 8 VFs) Oct 2 19:20:31.554562 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Oct 2 19:20:31.554601 kernel: pci 0000:00:01.0: bridge window [mem 0x95100000-0x952fffff] Oct 2 19:20:31.554643 kernel: pci 0000:00:01.0: bridge window [mem 0x90000000-0x93ffffff 64bit pref] Oct 2 19:20:31.554683 kernel: pci 0000:00:1b.0: PCI bridge to [bus 02] Oct 2 19:20:31.554731 kernel: pci 0000:03:00.0: [8086:1533] type 00 class 0x020000 Oct 2 19:20:31.554773 kernel: pci 0000:03:00.0: reg 0x10: [mem 0x95400000-0x9547ffff] Oct 2 19:20:31.554815 kernel: pci 0000:03:00.0: reg 0x18: [io 0x5000-0x501f] Oct 2 19:20:31.554856 kernel: pci 0000:03:00.0: reg 0x1c: [mem 0x95480000-0x95483fff] Oct 2 19:20:31.554898 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.554937 kernel: pci 0000:00:1b.4: PCI bridge to [bus 03] Oct 2 19:20:31.554977 kernel: pci 0000:00:1b.4: bridge window [io 0x5000-0x5fff] Oct 2 19:20:31.555021 kernel: pci 0000:00:1b.4: bridge window [mem 0x95400000-0x954fffff] Oct 2 19:20:31.555067 kernel: pci 0000:04:00.0: [8086:1533] type 00 class 0x020000 Oct 2 19:20:31.555113 kernel: pci 0000:04:00.0: reg 0x10: [mem 0x95300000-0x9537ffff] Oct 2 19:20:31.555154 kernel: pci 0000:04:00.0: reg 0x18: [io 0x4000-0x401f] Oct 2 19:20:31.555198 kernel: pci 0000:04:00.0: reg 0x1c: [mem 0x95380000-0x95383fff] Oct 2 19:20:31.555238 kernel: pci 0000:04:00.0: PME# supported from D0 D3hot D3cold Oct 2 19:20:31.555279 kernel: pci 0000:00:1b.5: PCI bridge to [bus 04] Oct 2 19:20:31.555318 kernel: pci 0000:00:1b.5: bridge window [io 0x4000-0x4fff] Oct 2 19:20:31.555360 kernel: pci 0000:00:1b.5: bridge window [mem 0x95300000-0x953fffff] Oct 2 19:20:31.555401 kernel: pci 0000:00:1c.0: PCI bridge to [bus 05] Oct 2 19:20:31.555446 kernel: pci 0000:06:00.0: [1a03:1150] type 01 class 0x060400 Oct 2 19:20:31.555508 kernel: pci 0000:06:00.0: enabling Extended Tags Oct 2 19:20:31.555570 kernel: pci 0000:06:00.0: supports D1 D2 Oct 2 19:20:31.555612 kernel: pci 0000:06:00.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:20:31.555653 kernel: pci 0000:00:1c.3: PCI bridge to [bus 06-07] Oct 2 19:20:31.555695 kernel: pci 0000:00:1c.3: bridge window [io 0x3000-0x3fff] Oct 2 19:20:31.555736 kernel: pci 0000:00:1c.3: bridge window [mem 0x94000000-0x950fffff] Oct 2 19:20:31.555784 kernel: pci_bus 0000:07: extended config space not accessible Oct 2 19:20:31.555832 kernel: pci 0000:07:00.0: [1a03:2000] type 00 class 0x030000 Oct 2 19:20:31.555876 kernel: pci 0000:07:00.0: reg 0x10: [mem 0x94000000-0x94ffffff] Oct 2 19:20:31.555921 kernel: pci 0000:07:00.0: reg 0x14: [mem 0x95000000-0x9501ffff] Oct 2 19:20:31.555965 kernel: pci 0000:07:00.0: reg 0x18: [io 0x3000-0x307f] Oct 2 19:20:31.556009 kernel: pci 0000:07:00.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:20:31.556055 kernel: pci 0000:07:00.0: supports D1 D2 Oct 2 19:20:31.556098 kernel: pci 0000:07:00.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:20:31.556141 kernel: pci 0000:06:00.0: PCI bridge to [bus 07] Oct 2 19:20:31.556183 kernel: pci 0000:06:00.0: bridge window [io 0x3000-0x3fff] Oct 2 19:20:31.556226 kernel: pci 0000:06:00.0: bridge window [mem 0x94000000-0x950fffff] Oct 2 19:20:31.556236 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 0 Oct 2 19:20:31.556272 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 1 Oct 2 19:20:31.556279 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 0 Oct 2 19:20:31.556284 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 0 Oct 2 19:20:31.556290 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 0 Oct 2 19:20:31.556295 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 0 Oct 2 19:20:31.556320 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 0 Oct 2 19:20:31.556325 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 0 Oct 2 19:20:31.556330 kernel: iommu: Default domain type: Translated Oct 2 19:20:31.556336 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:20:31.556380 kernel: pci 0000:07:00.0: vgaarb: setting as boot VGA device Oct 2 19:20:31.556426 kernel: pci 0000:07:00.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:20:31.556468 kernel: pci 0000:07:00.0: vgaarb: bridge control possible Oct 2 19:20:31.556475 kernel: vgaarb: loaded Oct 2 19:20:31.556481 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:20:31.556488 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:20:31.556493 kernel: PTP clock support registered Oct 2 19:20:31.556498 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:20:31.556523 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:20:31.556528 kernel: e820: reserve RAM buffer [mem 0x00099800-0x0009ffff] Oct 2 19:20:31.556535 kernel: e820: reserve RAM buffer [mem 0x8247b000-0x83ffffff] Oct 2 19:20:31.556540 kernel: e820: reserve RAM buffer [mem 0x8afcd000-0x8bffffff] Oct 2 19:20:31.556564 kernel: e820: reserve RAM buffer [mem 0x8c23b000-0x8fffffff] Oct 2 19:20:31.556569 kernel: e820: reserve RAM buffer [mem 0x8ef00000-0x8fffffff] Oct 2 19:20:31.556574 kernel: e820: reserve RAM buffer [mem 0x86f000000-0x86fffffff] Oct 2 19:20:31.556579 kernel: clocksource: Switched to clocksource tsc-early Oct 2 19:20:31.556584 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:20:31.556590 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:20:31.556595 kernel: pnp: PnP ACPI init Oct 2 19:20:31.556639 kernel: system 00:00: [mem 0x40000000-0x403fffff] has been reserved Oct 2 19:20:31.556679 kernel: pnp 00:02: [dma 0 disabled] Oct 2 19:20:31.556719 kernel: pnp 00:03: [dma 0 disabled] Oct 2 19:20:31.556761 kernel: system 00:04: [io 0x0680-0x069f] has been reserved Oct 2 19:20:31.556797 kernel: system 00:04: [io 0x164e-0x164f] has been reserved Oct 2 19:20:31.556837 kernel: system 00:05: [io 0x1854-0x1857] has been reserved Oct 2 19:20:31.556878 kernel: system 00:06: [mem 0xfed10000-0xfed17fff] has been reserved Oct 2 19:20:31.556915 kernel: system 00:06: [mem 0xfed18000-0xfed18fff] has been reserved Oct 2 19:20:31.556950 kernel: system 00:06: [mem 0xfed19000-0xfed19fff] has been reserved Oct 2 19:20:31.556986 kernel: system 00:06: [mem 0xe0000000-0xefffffff] has been reserved Oct 2 19:20:31.557023 kernel: system 00:06: [mem 0xfed20000-0xfed3ffff] has been reserved Oct 2 19:20:31.557058 kernel: system 00:06: [mem 0xfed90000-0xfed93fff] could not be reserved Oct 2 19:20:31.557097 kernel: system 00:06: [mem 0xfed45000-0xfed8ffff] has been reserved Oct 2 19:20:31.557134 kernel: system 00:06: [mem 0xfee00000-0xfeefffff] could not be reserved Oct 2 19:20:31.557174 kernel: system 00:07: [io 0x1800-0x18fe] could not be reserved Oct 2 19:20:31.557210 kernel: system 00:07: [mem 0xfd000000-0xfd69ffff] has been reserved Oct 2 19:20:31.557246 kernel: system 00:07: [mem 0xfd6c0000-0xfd6cffff] has been reserved Oct 2 19:20:31.557283 kernel: system 00:07: [mem 0xfd6f0000-0xfdffffff] has been reserved Oct 2 19:20:31.557319 kernel: system 00:07: [mem 0xfe000000-0xfe01ffff] could not be reserved Oct 2 19:20:31.557355 kernel: system 00:07: [mem 0xfe200000-0xfe7fffff] has been reserved Oct 2 19:20:31.557393 kernel: system 00:07: [mem 0xff000000-0xffffffff] has been reserved Oct 2 19:20:31.557433 kernel: system 00:08: [io 0x2000-0x20fe] has been reserved Oct 2 19:20:31.557440 kernel: pnp: PnP ACPI: found 10 devices Oct 2 19:20:31.557446 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:20:31.557451 kernel: NET: Registered PF_INET protocol family Oct 2 19:20:31.557457 kernel: IP idents hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:20:31.557462 kernel: tcp_listen_portaddr_hash hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:20:31.557467 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:20:31.557474 kernel: TCP established hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:20:31.557479 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:20:31.557484 kernel: TCP: Hash tables configured (established 262144 bind 65536) Oct 2 19:20:31.557491 kernel: UDP hash table entries: 16384 (order: 7, 524288 bytes, linear) Oct 2 19:20:31.557496 kernel: UDP-Lite hash table entries: 16384 (order: 7, 524288 bytes, linear) Oct 2 19:20:31.557526 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:20:31.557532 kernel: NET: Registered PF_XDP protocol family Oct 2 19:20:31.557593 kernel: pci 0000:00:15.0: BAR 0: assigned [mem 0x95515000-0x95515fff 64bit] Oct 2 19:20:31.557636 kernel: pci 0000:00:15.1: BAR 0: assigned [mem 0x9551b000-0x9551bfff 64bit] Oct 2 19:20:31.557676 kernel: pci 0000:00:1e.0: BAR 0: assigned [mem 0x9551c000-0x9551cfff 64bit] Oct 2 19:20:31.557718 kernel: pci 0000:01:00.0: BAR 7: no space for [mem size 0x00800000 64bit pref] Oct 2 19:20:31.557761 kernel: pci 0000:01:00.0: BAR 7: failed to assign [mem size 0x00800000 64bit pref] Oct 2 19:20:31.557803 kernel: pci 0000:01:00.1: BAR 7: no space for [mem size 0x00800000 64bit pref] Oct 2 19:20:31.557845 kernel: pci 0000:01:00.1: BAR 7: failed to assign [mem size 0x00800000 64bit pref] Oct 2 19:20:31.557886 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Oct 2 19:20:31.557927 kernel: pci 0000:00:01.0: bridge window [mem 0x95100000-0x952fffff] Oct 2 19:20:31.557969 kernel: pci 0000:00:01.0: bridge window [mem 0x90000000-0x93ffffff 64bit pref] Oct 2 19:20:31.558010 kernel: pci 0000:00:1b.0: PCI bridge to [bus 02] Oct 2 19:20:31.558050 kernel: pci 0000:00:1b.4: PCI bridge to [bus 03] Oct 2 19:20:31.558091 kernel: pci 0000:00:1b.4: bridge window [io 0x5000-0x5fff] Oct 2 19:20:31.558131 kernel: pci 0000:00:1b.4: bridge window [mem 0x95400000-0x954fffff] Oct 2 19:20:31.558173 kernel: pci 0000:00:1b.5: PCI bridge to [bus 04] Oct 2 19:20:31.558214 kernel: pci 0000:00:1b.5: bridge window [io 0x4000-0x4fff] Oct 2 19:20:31.558254 kernel: pci 0000:00:1b.5: bridge window [mem 0x95300000-0x953fffff] Oct 2 19:20:31.558296 kernel: pci 0000:00:1c.0: PCI bridge to [bus 05] Oct 2 19:20:31.558338 kernel: pci 0000:06:00.0: PCI bridge to [bus 07] Oct 2 19:20:31.558380 kernel: pci 0000:06:00.0: bridge window [io 0x3000-0x3fff] Oct 2 19:20:31.558422 kernel: pci 0000:06:00.0: bridge window [mem 0x94000000-0x950fffff] Oct 2 19:20:31.558463 kernel: pci 0000:00:1c.3: PCI bridge to [bus 06-07] Oct 2 19:20:31.558530 kernel: pci 0000:00:1c.3: bridge window [io 0x3000-0x3fff] Oct 2 19:20:31.558592 kernel: pci 0000:00:1c.3: bridge window [mem 0x94000000-0x950fffff] Oct 2 19:20:31.558630 kernel: pci_bus 0000:00: Some PCI device resources are unassigned, try booting with pci=realloc Oct 2 19:20:31.558666 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:20:31.558701 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:20:31.558736 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:20:31.558771 kernel: pci_bus 0000:00: resource 7 [mem 0x90000000-0xdfffffff window] Oct 2 19:20:31.558806 kernel: pci_bus 0000:00: resource 8 [mem 0xfc800000-0xfe7fffff window] Oct 2 19:20:31.558847 kernel: pci_bus 0000:01: resource 1 [mem 0x95100000-0x952fffff] Oct 2 19:20:31.558888 kernel: pci_bus 0000:01: resource 2 [mem 0x90000000-0x93ffffff 64bit pref] Oct 2 19:20:31.558930 kernel: pci_bus 0000:03: resource 0 [io 0x5000-0x5fff] Oct 2 19:20:31.558969 kernel: pci_bus 0000:03: resource 1 [mem 0x95400000-0x954fffff] Oct 2 19:20:31.559010 kernel: pci_bus 0000:04: resource 0 [io 0x4000-0x4fff] Oct 2 19:20:31.559048 kernel: pci_bus 0000:04: resource 1 [mem 0x95300000-0x953fffff] Oct 2 19:20:31.559090 kernel: pci_bus 0000:06: resource 0 [io 0x3000-0x3fff] Oct 2 19:20:31.559129 kernel: pci_bus 0000:06: resource 1 [mem 0x94000000-0x950fffff] Oct 2 19:20:31.559169 kernel: pci_bus 0000:07: resource 0 [io 0x3000-0x3fff] Oct 2 19:20:31.559208 kernel: pci_bus 0000:07: resource 1 [mem 0x94000000-0x950fffff] Oct 2 19:20:31.559216 kernel: PCI: CLS 64 bytes, default 64 Oct 2 19:20:31.559221 kernel: DMAR: No ATSR found Oct 2 19:20:31.559226 kernel: DMAR: No SATC found Oct 2 19:20:31.559231 kernel: DMAR: dmar0: Using Queued invalidation Oct 2 19:20:31.559271 kernel: pci 0000:00:00.0: Adding to iommu group 0 Oct 2 19:20:31.559314 kernel: pci 0000:00:01.0: Adding to iommu group 1 Oct 2 19:20:31.559356 kernel: pci 0000:00:08.0: Adding to iommu group 2 Oct 2 19:20:31.559396 kernel: pci 0000:00:12.0: Adding to iommu group 3 Oct 2 19:20:31.559435 kernel: pci 0000:00:14.0: Adding to iommu group 4 Oct 2 19:20:31.559476 kernel: pci 0000:00:14.2: Adding to iommu group 4 Oct 2 19:20:31.559563 kernel: pci 0000:00:15.0: Adding to iommu group 5 Oct 2 19:20:31.559604 kernel: pci 0000:00:15.1: Adding to iommu group 5 Oct 2 19:20:31.559644 kernel: pci 0000:00:16.0: Adding to iommu group 6 Oct 2 19:20:31.559686 kernel: pci 0000:00:16.1: Adding to iommu group 6 Oct 2 19:20:31.559727 kernel: pci 0000:00:16.4: Adding to iommu group 6 Oct 2 19:20:31.559767 kernel: pci 0000:00:17.0: Adding to iommu group 7 Oct 2 19:20:31.559807 kernel: pci 0000:00:1b.0: Adding to iommu group 8 Oct 2 19:20:31.559847 kernel: pci 0000:00:1b.4: Adding to iommu group 9 Oct 2 19:20:31.559889 kernel: pci 0000:00:1b.5: Adding to iommu group 10 Oct 2 19:20:31.559929 kernel: pci 0000:00:1c.0: Adding to iommu group 11 Oct 2 19:20:31.559970 kernel: pci 0000:00:1c.3: Adding to iommu group 12 Oct 2 19:20:31.560011 kernel: pci 0000:00:1e.0: Adding to iommu group 13 Oct 2 19:20:31.560052 kernel: pci 0000:00:1f.0: Adding to iommu group 14 Oct 2 19:20:31.560092 kernel: pci 0000:00:1f.4: Adding to iommu group 14 Oct 2 19:20:31.560132 kernel: pci 0000:00:1f.5: Adding to iommu group 14 Oct 2 19:20:31.560174 kernel: pci 0000:01:00.0: Adding to iommu group 1 Oct 2 19:20:31.560216 kernel: pci 0000:01:00.1: Adding to iommu group 1 Oct 2 19:20:31.560258 kernel: pci 0000:03:00.0: Adding to iommu group 15 Oct 2 19:20:31.560300 kernel: pci 0000:04:00.0: Adding to iommu group 16 Oct 2 19:20:31.560345 kernel: pci 0000:06:00.0: Adding to iommu group 17 Oct 2 19:20:31.560388 kernel: pci 0000:07:00.0: Adding to iommu group 17 Oct 2 19:20:31.560396 kernel: DMAR: Intel(R) Virtualization Technology for Directed I/O Oct 2 19:20:31.560401 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:20:31.560407 kernel: software IO TLB: mapped [mem 0x0000000086fcd000-0x000000008afcd000] (64MB) Oct 2 19:20:31.560412 kernel: RAPL PMU: API unit is 2^-32 Joules, 3 fixed counters, 655360 ms ovfl timer Oct 2 19:20:31.560417 kernel: RAPL PMU: hw unit of domain pp0-core 2^-14 Joules Oct 2 19:20:31.560422 kernel: RAPL PMU: hw unit of domain package 2^-14 Joules Oct 2 19:20:31.560429 kernel: RAPL PMU: hw unit of domain dram 2^-14 Joules Oct 2 19:20:31.560473 kernel: platform rtc_cmos: registered platform RTC device (no PNP device found) Oct 2 19:20:31.560481 kernel: Initialise system trusted keyrings Oct 2 19:20:31.560487 kernel: workingset: timestamp_bits=39 max_order=23 bucket_order=0 Oct 2 19:20:31.560514 kernel: Key type asymmetric registered Oct 2 19:20:31.560519 kernel: Asymmetric key parser 'x509' registered Oct 2 19:20:31.560524 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:20:31.560529 kernel: io scheduler mq-deadline registered Oct 2 19:20:31.560536 kernel: io scheduler kyber registered Oct 2 19:20:31.560541 kernel: io scheduler bfq registered Oct 2 19:20:31.560583 kernel: pcieport 0000:00:01.0: PME: Signaling with IRQ 121 Oct 2 19:20:31.560625 kernel: pcieport 0000:00:1b.0: PME: Signaling with IRQ 122 Oct 2 19:20:31.560666 kernel: pcieport 0000:00:1b.4: PME: Signaling with IRQ 123 Oct 2 19:20:31.560707 kernel: pcieport 0000:00:1b.5: PME: Signaling with IRQ 124 Oct 2 19:20:31.560749 kernel: pcieport 0000:00:1c.0: PME: Signaling with IRQ 125 Oct 2 19:20:31.560789 kernel: pcieport 0000:00:1c.3: PME: Signaling with IRQ 126 Oct 2 19:20:31.560837 kernel: thermal LNXTHERM:00: registered as thermal_zone0 Oct 2 19:20:31.560845 kernel: ACPI: thermal: Thermal Zone [TZ00] (28 C) Oct 2 19:20:31.560851 kernel: ERST: Error Record Serialization Table (ERST) support is initialized. Oct 2 19:20:31.560856 kernel: pstore: Registered erst as persistent store backend Oct 2 19:20:31.560862 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:20:31.560867 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:20:31.560872 kernel: 00:02: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:20:31.560877 kernel: 00:03: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:20:31.560884 kernel: hpet_acpi_add: no address or irqs in _CRS Oct 2 19:20:31.560927 kernel: tpm_tis MSFT0101:00: 2.0 TPM (device-id 0x1B, rev-id 16) Oct 2 19:20:31.560935 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:20:31.560973 kernel: rtc_cmos rtc_cmos: RTC can wake from S4 Oct 2 19:20:31.561011 kernel: rtc_cmos rtc_cmos: registered as rtc0 Oct 2 19:20:31.561050 kernel: rtc_cmos rtc_cmos: setting system clock to 2023-10-02T19:20:30 UTC (1696274430) Oct 2 19:20:31.561087 kernel: rtc_cmos rtc_cmos: alarms up to one month, y3k, 114 bytes nvram Oct 2 19:20:31.561094 kernel: fail to initialize ptp_kvm Oct 2 19:20:31.561100 kernel: intel_pstate: Intel P-state driver initializing Oct 2 19:20:31.561106 kernel: intel_pstate: Disabling energy efficiency optimization Oct 2 19:20:31.561111 kernel: intel_pstate: HWP enabled Oct 2 19:20:31.561116 kernel: vesafb: mode is 1024x768x8, linelength=1024, pages=0 Oct 2 19:20:31.561122 kernel: vesafb: scrolling: redraw Oct 2 19:20:31.561127 kernel: vesafb: Pseudocolor: size=0:8:8:8, shift=0:0:0:0 Oct 2 19:20:31.561132 kernel: vesafb: framebuffer at 0x94000000, mapped to 0x0000000082e19ff5, using 768k, total 768k Oct 2 19:20:31.561138 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:20:31.561143 kernel: fb0: VESA VGA frame buffer device Oct 2 19:20:31.561149 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:20:31.561154 kernel: Segment Routing with IPv6 Oct 2 19:20:31.561159 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:20:31.561165 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:20:31.561170 kernel: Key type dns_resolver registered Oct 2 19:20:31.561175 kernel: microcode: sig=0x906ed, pf=0x2, revision=0xf4 Oct 2 19:20:31.561180 kernel: microcode: Microcode Update Driver: v2.2. Oct 2 19:20:31.561185 kernel: IPI shorthand broadcast: enabled Oct 2 19:20:31.561191 kernel: sched_clock: Marking stable (1732492354, 1339246194)->(4490481333, -1418742785) Oct 2 19:20:31.561197 kernel: registered taskstats version 1 Oct 2 19:20:31.561202 kernel: Loading compiled-in X.509 certificates Oct 2 19:20:31.561207 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:20:31.561213 kernel: Key type .fscrypt registered Oct 2 19:20:31.561218 kernel: Key type fscrypt-provisioning registered Oct 2 19:20:31.561223 kernel: pstore: Using crash dump compression: deflate Oct 2 19:20:31.561228 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:20:31.561233 kernel: ima: No architecture policies found Oct 2 19:20:31.561239 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:20:31.561245 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:20:31.561250 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:20:31.561255 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:20:31.561261 kernel: Run /init as init process Oct 2 19:20:31.561266 kernel: with arguments: Oct 2 19:20:31.561271 kernel: /init Oct 2 19:20:31.561276 kernel: with environment: Oct 2 19:20:31.561281 kernel: HOME=/ Oct 2 19:20:31.561287 kernel: TERM=linux Oct 2 19:20:31.561292 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:20:31.561299 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:20:31.561305 systemd[1]: Detected architecture x86-64. Oct 2 19:20:31.561311 systemd[1]: Running in initrd. Oct 2 19:20:31.561316 systemd[1]: No hostname configured, using default hostname. Oct 2 19:20:31.561322 systemd[1]: Hostname set to . Oct 2 19:20:31.561327 systemd[1]: Initializing machine ID from random generator. Oct 2 19:20:31.561333 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:20:31.561339 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:20:31.561344 systemd[1]: Reached target cryptsetup.target. Oct 2 19:20:31.561349 systemd[1]: Reached target paths.target. Oct 2 19:20:31.561355 systemd[1]: Reached target slices.target. Oct 2 19:20:31.561360 systemd[1]: Reached target swap.target. Oct 2 19:20:31.561366 systemd[1]: Reached target timers.target. Oct 2 19:20:31.561371 systemd[1]: Listening on iscsid.socket. Oct 2 19:20:31.561378 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:20:31.561383 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:20:31.561389 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:20:31.561394 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:20:31.561400 kernel: tsc: Refined TSC clocksource calibration: 3407.999 MHz Oct 2 19:20:31.561405 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:20:31.561410 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd336761, max_idle_ns: 440795243819 ns Oct 2 19:20:31.561416 kernel: clocksource: Switched to clocksource tsc Oct 2 19:20:31.561422 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:20:31.561427 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:20:31.561433 systemd[1]: Reached target sockets.target. Oct 2 19:20:31.561438 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:20:31.561444 systemd[1]: Finished network-cleanup.service. Oct 2 19:20:31.561449 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:20:31.561455 systemd[1]: Starting systemd-journald.service... Oct 2 19:20:31.561460 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:20:31.561467 systemd-journald[269]: Journal started Oct 2 19:20:31.561495 systemd-journald[269]: Runtime Journal (/run/log/journal/7e52ea8aa0e64bae9490f2af9b74a204) is 8.0M, max 640.1M, 632.1M free. Oct 2 19:20:31.565115 systemd-modules-load[270]: Inserted module 'overlay' Oct 2 19:20:31.623578 kernel: audit: type=1334 audit(1696274431.571:2): prog-id=6 op=LOAD Oct 2 19:20:31.623588 systemd[1]: Starting systemd-resolved.service... Oct 2 19:20:31.623596 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:20:31.571000 audit: BPF prog-id=6 op=LOAD Oct 2 19:20:31.655490 kernel: Bridge firewalling registered Oct 2 19:20:31.655505 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:20:31.671031 systemd-modules-load[270]: Inserted module 'br_netfilter' Oct 2 19:20:31.707574 systemd[1]: Started systemd-journald.service. Oct 2 19:20:31.707585 kernel: SCSI subsystem initialized Oct 2 19:20:31.678312 systemd-resolved[272]: Positive Trust Anchors: Oct 2 19:20:31.678317 systemd-resolved[272]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:20:31.678336 systemd-resolved[272]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:20:31.813755 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:20:31.813768 kernel: audit: type=1130 audit(1696274431.747:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.813778 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:20:31.813785 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:20:31.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.679825 systemd-resolved[272]: Defaulting to hostname 'linux'. Oct 2 19:20:31.910096 kernel: audit: type=1130 audit(1696274431.867:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.747693 systemd[1]: Started systemd-resolved.service. Oct 2 19:20:31.961218 kernel: audit: type=1130 audit(1696274431.918:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.826977 systemd-modules-load[270]: Inserted module 'dm_multipath' Oct 2 19:20:32.012765 kernel: audit: type=1130 audit(1696274431.969:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.887880 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:20:32.066294 kernel: audit: type=1130 audit(1696274432.021:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.918779 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:20:32.120590 kernel: audit: type=1130 audit(1696274432.074:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:31.969768 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:20:32.021779 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:20:32.074766 systemd[1]: Reached target nss-lookup.target. Oct 2 19:20:32.129160 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:20:32.138338 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:20:32.138761 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:20:32.141702 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:20:32.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.142359 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:20:32.190561 kernel: audit: type=1130 audit(1696274432.141:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.202828 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:20:32.267599 kernel: audit: type=1130 audit(1696274432.202:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.260150 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:20:32.281609 dracut-cmdline[293]: dracut-dracut-053 Oct 2 19:20:32.281609 dracut-cmdline[293]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Oct 2 19:20:32.281609 dracut-cmdline[293]: BEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:20:32.350602 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:20:32.350614 kernel: iscsi: registered transport (tcp) Oct 2 19:20:32.399584 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:20:32.399603 kernel: QLogic iSCSI HBA Driver Oct 2 19:20:32.416153 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:20:32.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:32.416763 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:20:32.472558 kernel: raid6: avx2x4 gen() 41879 MB/s Oct 2 19:20:32.507518 kernel: raid6: avx2x4 xor() 14854 MB/s Oct 2 19:20:32.542522 kernel: raid6: avx2x2 gen() 51871 MB/s Oct 2 19:20:32.577518 kernel: raid6: avx2x2 xor() 32138 MB/s Oct 2 19:20:32.612561 kernel: raid6: avx2x1 gen() 44456 MB/s Oct 2 19:20:32.646551 kernel: raid6: avx2x1 xor() 27897 MB/s Oct 2 19:20:32.680518 kernel: raid6: sse2x4 gen() 21379 MB/s Oct 2 19:20:32.714561 kernel: raid6: sse2x4 xor() 11920 MB/s Oct 2 19:20:32.748562 kernel: raid6: sse2x2 gen() 21666 MB/s Oct 2 19:20:32.782562 kernel: raid6: sse2x2 xor() 13443 MB/s Oct 2 19:20:32.816558 kernel: raid6: sse2x1 gen() 18297 MB/s Oct 2 19:20:32.867968 kernel: raid6: sse2x1 xor() 8898 MB/s Oct 2 19:20:32.867983 kernel: raid6: using algorithm avx2x2 gen() 51871 MB/s Oct 2 19:20:32.867991 kernel: raid6: .... xor() 32138 MB/s, rmw enabled Oct 2 19:20:32.885949 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:20:32.931542 kernel: xor: automatically using best checksumming function avx Oct 2 19:20:33.010495 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:20:33.015267 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:20:33.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:33.024000 audit: BPF prog-id=7 op=LOAD Oct 2 19:20:33.024000 audit: BPF prog-id=8 op=LOAD Oct 2 19:20:33.025480 systemd[1]: Starting systemd-udevd.service... Oct 2 19:20:33.033524 systemd-udevd[477]: Using default interface naming scheme 'v252'. Oct 2 19:20:33.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:33.039641 systemd[1]: Started systemd-udevd.service. Oct 2 19:20:33.057589 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:20:33.088905 dracut-pre-trigger[489]: rd.md=0: removing MD RAID activation Oct 2 19:20:33.105860 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:20:33.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:33.106362 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:20:33.153614 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:20:33.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:33.181492 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:20:33.183514 kernel: libata version 3.00 loaded. Oct 2 19:20:33.218614 kernel: ACPI: bus type USB registered Oct 2 19:20:33.218646 kernel: usbcore: registered new interface driver usbfs Oct 2 19:20:33.218654 kernel: usbcore: registered new interface driver hub Oct 2 19:20:33.236316 kernel: usbcore: registered new device driver usb Oct 2 19:20:33.277501 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:20:33.277556 kernel: ahci 0000:00:17.0: version 3.0 Oct 2 19:20:33.277747 kernel: AES CTR mode by8 optimization enabled Oct 2 19:20:33.335629 kernel: ahci 0000:00:17.0: AHCI 0001.0301 32 slots 7 ports 6 Gbps 0x7f impl SATA mode Oct 2 19:20:33.335728 kernel: ahci 0000:00:17.0: flags: 64bit ncq sntf clo only pio slum part ems deso sadm sds apst Oct 2 19:20:33.336491 kernel: mlx5_core 0000:01:00.0: firmware version: 14.31.1014 Oct 2 19:20:33.374241 kernel: mlx5_core 0000:01:00.0: 63.008 Gb/s available PCIe bandwidth (8.0 GT/s PCIe x8 link) Oct 2 19:20:33.374317 kernel: scsi host0: ahci Oct 2 19:20:33.415841 kernel: scsi host1: ahci Oct 2 19:20:33.415941 kernel: scsi host2: ahci Oct 2 19:20:33.416000 kernel: scsi host3: ahci Oct 2 19:20:33.441471 kernel: scsi host4: ahci Oct 2 19:20:33.441572 kernel: scsi host5: ahci Oct 2 19:20:33.465309 kernel: scsi host6: ahci Oct 2 19:20:33.465420 kernel: ata1: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516100 irq 127 Oct 2 19:20:33.497277 kernel: ata2: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516180 irq 127 Oct 2 19:20:33.497292 kernel: ata3: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516200 irq 127 Oct 2 19:20:33.527476 kernel: ata4: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516280 irq 127 Oct 2 19:20:33.527492 kernel: ata5: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516300 irq 127 Oct 2 19:20:33.555928 kernel: ata6: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516380 irq 127 Oct 2 19:20:33.555943 kernel: ata7: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516400 irq 127 Oct 2 19:20:33.570491 kernel: igb: Intel(R) Gigabit Ethernet Network Driver Oct 2 19:20:33.591945 kernel: igb: Copyright (c) 2007-2014 Intel Corporation. Oct 2 19:20:33.592488 kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Oct 2 19:20:33.616401 kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 1 Oct 2 19:20:33.642741 kernel: xhci_hcd 0000:00:14.0: hcc params 0x200077c1 hci version 0x110 quirks 0x0000000000009810 Oct 2 19:20:33.642832 kernel: pps pps0: new PPS source ptp0 Oct 2 19:20:33.642912 kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Oct 2 19:20:33.642988 kernel: igb 0000:03:00.0: added PHC on eth0 Oct 2 19:20:33.650489 kernel: mlx5_core 0000:01:00.0: E-Switch: Total vports 10, per vport: max uc(128) max mc(2048) Oct 2 19:20:33.654192 kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 2 Oct 2 19:20:33.654262 kernel: xhci_hcd 0000:00:14.0: Host supports USB 3.1 Enhanced SuperSpeed Oct 2 19:20:33.668537 kernel: igb 0000:03:00.0: Intel(R) Gigabit Ethernet Network Connection Oct 2 19:20:33.668612 kernel: mlx5_core 0000:01:00.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:20:33.694939 kernel: hub 1-0:1.0: USB hub found Oct 2 19:20:33.695020 kernel: igb 0000:03:00.0: eth0: (PCIe:2.5Gb/s:Width x1) 00:25:90:bd:75:7c Oct 2 19:20:33.709026 kernel: hub 1-0:1.0: 16 ports detected Oct 2 19:20:33.738811 kernel: igb 0000:03:00.0: eth0: PBA No: 010000-000 Oct 2 19:20:33.750524 kernel: hub 2-0:1.0: USB hub found Oct 2 19:20:33.750605 kernel: igb 0000:03:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s) Oct 2 19:20:33.790491 kernel: pps pps1: new PPS source ptp2 Oct 2 19:20:33.790564 kernel: hub 2-0:1.0: 10 ports detected Oct 2 19:20:33.818044 kernel: igb 0000:04:00.0: added PHC on eth1 Oct 2 19:20:33.830268 kernel: usb: port power management may be unreliable Oct 2 19:20:33.842487 kernel: igb 0000:04:00.0: Intel(R) Gigabit Ethernet Network Connection Oct 2 19:20:33.897285 kernel: ata4: SATA link down (SStatus 0 SControl 300) Oct 2 19:20:33.897303 kernel: igb 0000:04:00.0: eth1: (PCIe:2.5Gb/s:Width x1) 00:25:90:bd:75:7d Oct 2 19:20:33.897383 kernel: mlx5_core 0000:01:00.0: Supported tc offload range - chains: 4294967294, prios: 4294967295 Oct 2 19:20:33.897448 kernel: ata6: SATA link down (SStatus 0 SControl 300) Oct 2 19:20:33.905492 kernel: mlx5_core 0000:01:00.1: firmware version: 14.31.1014 Oct 2 19:20:33.905565 kernel: mlx5_core 0000:01:00.1: 63.008 Gb/s available PCIe bandwidth (8.0 GT/s PCIe x8 link) Oct 2 19:20:33.931040 kernel: igb 0000:04:00.0: eth1: PBA No: 010000-000 Oct 2 19:20:33.931164 kernel: ata5: SATA link down (SStatus 0 SControl 300) Oct 2 19:20:33.945491 kernel: igb 0000:04:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s) Oct 2 19:20:34.023539 kernel: usb 1-14: new high-speed USB device number 2 using xhci_hcd Oct 2 19:20:34.023564 kernel: ata7: SATA link down (SStatus 0 SControl 300) Oct 2 19:20:34.052490 kernel: ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Oct 2 19:20:34.068519 kernel: ata3: SATA link down (SStatus 0 SControl 300) Oct 2 19:20:34.082524 kernel: ata2.00: ATA-10: Micron_5200_MTFDDAK480TDN, D1MU020, max UDMA/133 Oct 2 19:20:34.099542 kernel: ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Oct 2 19:20:34.132709 kernel: ata1.00: ATA-10: Micron_5200_MTFDDAK480TDN, D1MU020, max UDMA/133 Oct 2 19:20:34.165722 kernel: ata2.00: 937703088 sectors, multi 16: LBA48 NCQ (depth 32), AA Oct 2 19:20:34.165738 kernel: ata2.00: Features: NCQ-prio Oct 2 19:20:34.198172 kernel: ata1.00: 937703088 sectors, multi 16: LBA48 NCQ (depth 32), AA Oct 2 19:20:34.198188 kernel: hub 1-14:1.0: USB hub found Oct 2 19:20:34.198263 kernel: ata1.00: Features: NCQ-prio Oct 2 19:20:34.198271 kernel: hub 1-14:1.0: 4 ports detected Oct 2 19:20:34.207490 kernel: mlx5_core 0000:01:00.1: E-Switch: Total vports 10, per vport: max uc(128) max mc(2048) Oct 2 19:20:34.211278 kernel: port_module: 9 callbacks suppressed Oct 2 19:20:34.211293 kernel: mlx5_core 0000:01:00.1: Port module event: module 1, Cable plugged Oct 2 19:20:34.227536 kernel: ata2.00: configured for UDMA/133 Oct 2 19:20:34.227550 kernel: mlx5_core 0000:01:00.1: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:20:34.332533 kernel: ata1.00: configured for UDMA/133 Oct 2 19:20:34.332548 kernel: scsi 0:0:0:0: Direct-Access ATA Micron_5200_MTFD U020 PQ: 0 ANSI: 5 Oct 2 19:20:34.352573 kernel: scsi 1:0:0:0: Direct-Access ATA Micron_5200_MTFD U020 PQ: 0 ANSI: 5 Oct 2 19:20:34.389491 kernel: igb 0000:03:00.0 eno1: renamed from eth0 Oct 2 19:20:34.410276 kernel: ata2.00: Enabling discard_zeroes_data Oct 2 19:20:34.410292 kernel: ata1.00: Enabling discard_zeroes_data Oct 2 19:20:34.425903 kernel: sd 1:0:0:0: [sdb] 937703088 512-byte logical blocks: (480 GB/447 GiB) Oct 2 19:20:34.425979 kernel: sd 0:0:0:0: [sda] 937703088 512-byte logical blocks: (480 GB/447 GiB) Oct 2 19:20:34.456559 kernel: sd 1:0:0:0: [sdb] 4096-byte physical blocks Oct 2 19:20:34.456653 kernel: mlx5_core 0000:01:00.1: Supported tc offload range - chains: 4294967294, prios: 4294967295 Oct 2 19:20:34.462954 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:20:34.478554 kernel: sd 1:0:0:0: [sdb] Write Protect is off Oct 2 19:20:34.498442 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 19:20:34.499492 kernel: igb 0000:04:00.0 eno2: renamed from eth1 Oct 2 19:20:34.510555 kernel: usb 1-14.1: new low-speed USB device number 3 using xhci_hcd Oct 2 19:20:34.514147 kernel: sd 1:0:0:0: [sdb] Mode Sense: 00 3a 00 00 Oct 2 19:20:34.529326 kernel: sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00 Oct 2 19:20:34.544332 kernel: sd 1:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Oct 2 19:20:34.559518 kernel: sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Oct 2 19:20:34.630538 kernel: ata2.00: Enabling discard_zeroes_data Oct 2 19:20:34.645658 kernel: ata1.00: Enabling discard_zeroes_data Oct 2 19:20:34.645674 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:20:34.645681 kernel: ata2.00: Enabling discard_zeroes_data Oct 2 19:20:34.675751 kernel: sd 1:0:0:0: [sdb] Attached SCSI disk Oct 2 19:20:34.690492 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:20:34.721002 kernel: GPT:9289727 != 937703087 Oct 2 19:20:34.721019 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:20:34.736780 kernel: GPT:9289727 != 937703087 Oct 2 19:20:34.749974 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:20:34.764673 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:20:34.793543 kernel: ata1.00: Enabling discard_zeroes_data Oct 2 19:20:34.793558 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 19:20:34.825538 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: renamed from eth2 Oct 2 19:20:34.848171 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:20:34.932600 kernel: usbcore: registered new interface driver usbhid Oct 2 19:20:34.932618 kernel: usbhid: USB HID core driver Oct 2 19:20:34.932625 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by (udev-worker) (540) Oct 2 19:20:34.932632 kernel: input: HID 0557:2419 as /devices/pci0000:00/0000:00:14.0/usb1/1-14/1-14.1/1-14.1:1.0/0003:0557:2419.0001/input/input0 Oct 2 19:20:34.932639 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: renamed from eth0 Oct 2 19:20:34.900325 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:20:34.942585 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:20:35.058379 kernel: hid-generic 0003:0557:2419.0001: input,hidraw0: USB HID v1.00 Keyboard [HID 0557:2419] on usb-0000:00:14.0-14.1/input0 Oct 2 19:20:35.058496 kernel: input: HID 0557:2419 as /devices/pci0000:00/0000:00:14.0/usb1/1-14/1-14.1/1-14.1:1.1/0003:0557:2419.0002/input/input1 Oct 2 19:20:35.058510 kernel: hid-generic 0003:0557:2419.0002: input,hidraw1: USB HID v1.00 Mouse [HID 0557:2419] on usb-0000:00:14.0-14.1/input1 Oct 2 19:20:34.973219 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:20:35.071430 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:20:35.079182 systemd[1]: Starting disk-uuid.service... Oct 2 19:20:35.116559 kernel: ata1.00: Enabling discard_zeroes_data Oct 2 19:20:35.116589 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:20:35.116640 disk-uuid[681]: Primary Header is updated. Oct 2 19:20:35.116640 disk-uuid[681]: Secondary Entries is updated. Oct 2 19:20:35.116640 disk-uuid[681]: Secondary Header is updated. Oct 2 19:20:35.166562 kernel: ata1.00: Enabling discard_zeroes_data Oct 2 19:20:35.166572 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:20:35.166579 kernel: ata1.00: Enabling discard_zeroes_data Oct 2 19:20:35.191527 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:20:36.171822 kernel: ata1.00: Enabling discard_zeroes_data Oct 2 19:20:36.190322 disk-uuid[682]: The operation has completed successfully. Oct 2 19:20:36.198679 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:20:36.226450 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:20:36.321400 kernel: audit: type=1130 audit(1696274436.233:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.321415 kernel: audit: type=1131 audit(1696274436.233:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.226544 systemd[1]: Finished disk-uuid.service. Oct 2 19:20:36.350521 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:20:36.236899 systemd[1]: Starting verity-setup.service... Oct 2 19:20:36.401138 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:20:36.412790 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:20:36.424100 systemd[1]: Finished verity-setup.service. Oct 2 19:20:36.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.491496 kernel: audit: type=1130 audit(1696274436.438:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.552354 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:20:36.567743 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:20:36.559775 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:20:36.560174 systemd[1]: Starting ignition-setup.service... Oct 2 19:20:36.662542 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:20:36.662576 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:20:36.662583 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:20:36.662590 kernel: BTRFS info (device sda6): enabling ssd optimizations Oct 2 19:20:36.594231 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:20:36.670947 systemd[1]: Finished ignition-setup.service. Oct 2 19:20:36.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.687301 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:20:36.804535 kernel: audit: type=1130 audit(1696274436.686:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.804549 kernel: audit: type=1130 audit(1696274436.747:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.748529 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:20:36.813000 audit: BPF prog-id=9 op=LOAD Oct 2 19:20:36.814693 systemd[1]: Starting systemd-networkd.service... Oct 2 19:20:36.850636 kernel: audit: type=1334 audit(1696274436.813:24): prog-id=9 op=LOAD Oct 2 19:20:36.849575 systemd-networkd[869]: lo: Link UP Oct 2 19:20:36.908595 kernel: audit: type=1130 audit(1696274436.858:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.889847 ignition[858]: Ignition 2.14.0 Oct 2 19:20:36.849577 systemd-networkd[869]: lo: Gained carrier Oct 2 19:20:36.889851 ignition[858]: Stage: fetch-offline Oct 2 19:20:36.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.849857 systemd-networkd[869]: Enumeration completed Oct 2 19:20:37.068954 kernel: audit: type=1130 audit(1696274436.935:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:37.068970 kernel: audit: type=1130 audit(1696274436.995:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:37.068977 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Oct 2 19:20:36.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.889877 ignition[858]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:20:37.104633 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp1s0f1np1: link becomes ready Oct 2 19:20:36.849925 systemd[1]: Started systemd-networkd.service. Oct 2 19:20:36.889896 ignition[858]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Oct 2 19:20:36.850540 systemd-networkd[869]: enp1s0f1np1: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:20:37.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.898779 ignition[858]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Oct 2 19:20:36.858633 systemd[1]: Reached target network.target. Oct 2 19:20:37.156650 iscsid[896]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:20:37.156650 iscsid[896]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:20:37.156650 iscsid[896]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:20:37.156650 iscsid[896]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:20:37.156650 iscsid[896]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:20:37.156650 iscsid[896]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:20:37.156650 iscsid[896]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:20:37.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.898851 ignition[858]: parsed url from cmdline: "" Oct 2 19:20:36.912698 unknown[858]: fetched base config from "system" Oct 2 19:20:37.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.898853 ignition[858]: no config URL provided Oct 2 19:20:37.333589 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: Link up Oct 2 19:20:36.912708 unknown[858]: fetched user config from "system" Oct 2 19:20:36.898856 ignition[858]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:20:36.917130 systemd[1]: Starting iscsiuio.service... Oct 2 19:20:36.898881 ignition[858]: parsing config with SHA512: 26d4ccc8707370f1d4fb0e087a3af28ebd9b4f73b76d726d7c8e5a15c95b2a18a43c871806492118f29c6d0fa31e44a85bb76b3c0268f049c747ce54256d98b7 Oct 2 19:20:36.928860 systemd[1]: Started iscsiuio.service. Oct 2 19:20:36.912979 ignition[858]: fetch-offline: fetch-offline passed Oct 2 19:20:36.935848 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:20:36.912981 ignition[858]: POST message to Packet Timeline Oct 2 19:20:36.995742 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:20:36.912986 ignition[858]: POST Status error: resource requires networking Oct 2 19:20:36.996197 systemd[1]: Starting ignition-kargs.service... Oct 2 19:20:36.913014 ignition[858]: Ignition finished successfully Oct 2 19:20:37.070382 systemd-networkd[869]: enp1s0f0np0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:20:37.073353 ignition[886]: Ignition 2.14.0 Oct 2 19:20:37.083029 systemd[1]: Starting iscsid.service... Oct 2 19:20:37.073356 ignition[886]: Stage: kargs Oct 2 19:20:37.111655 systemd[1]: Started iscsid.service. Oct 2 19:20:37.073413 ignition[886]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:20:37.127031 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:20:37.073422 ignition[886]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Oct 2 19:20:37.146732 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:20:37.074784 ignition[886]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Oct 2 19:20:37.168614 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:20:37.076598 ignition[886]: kargs: kargs passed Oct 2 19:20:37.212620 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:20:37.076601 ignition[886]: POST message to Packet Timeline Oct 2 19:20:37.239684 systemd[1]: Reached target remote-fs.target. Oct 2 19:20:37.076612 ignition[886]: GET https://metadata.packet.net/metadata: attempt #1 Oct 2 19:20:37.258558 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:20:37.079279 ignition[886]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:60832->[::1]:53: read: connection refused Oct 2 19:20:37.277487 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:20:37.279911 ignition[886]: GET https://metadata.packet.net/metadata: attempt #2 Oct 2 19:20:37.328127 systemd-networkd[869]: eno2: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:20:37.280209 ignition[886]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:49816->[::1]:53: read: connection refused Oct 2 19:20:37.356799 systemd-networkd[869]: eno1: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:20:37.385099 systemd-networkd[869]: enp1s0f1np1: Link UP Oct 2 19:20:37.385237 systemd-networkd[869]: enp1s0f1np1: Gained carrier Oct 2 19:20:37.394715 systemd-networkd[869]: enp1s0f0np0: Link UP Oct 2 19:20:37.394859 systemd-networkd[869]: eno2: Link UP Oct 2 19:20:37.394992 systemd-networkd[869]: eno1: Link UP Oct 2 19:20:37.681272 ignition[886]: GET https://metadata.packet.net/metadata: attempt #3 Oct 2 19:20:37.682461 ignition[886]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:59993->[::1]:53: read: connection refused Oct 2 19:20:38.121028 systemd-networkd[869]: enp1s0f0np0: Gained carrier Oct 2 19:20:38.129755 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp1s0f0np0: link becomes ready Oct 2 19:20:38.144709 systemd-networkd[869]: enp1s0f0np0: DHCPv4 address 145.40.90.157/31, gateway 145.40.90.156 acquired from 145.40.83.140 Oct 2 19:20:38.482988 ignition[886]: GET https://metadata.packet.net/metadata: attempt #4 Oct 2 19:20:38.484461 ignition[886]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:35568->[::1]:53: read: connection refused Oct 2 19:20:39.186097 systemd-networkd[869]: enp1s0f1np1: Gained IPv6LL Oct 2 19:20:40.018075 systemd-networkd[869]: enp1s0f0np0: Gained IPv6LL Oct 2 19:20:40.085663 ignition[886]: GET https://metadata.packet.net/metadata: attempt #5 Oct 2 19:20:40.086998 ignition[886]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:38947->[::1]:53: read: connection refused Oct 2 19:20:43.290473 ignition[886]: GET https://metadata.packet.net/metadata: attempt #6 Oct 2 19:20:43.326683 ignition[886]: GET result: OK Oct 2 19:20:43.480368 ignition[886]: Ignition finished successfully Oct 2 19:20:43.484987 systemd[1]: Finished ignition-kargs.service. Oct 2 19:20:43.573939 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 19:20:43.573958 kernel: audit: type=1130 audit(1696274443.496:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:43.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:43.505826 ignition[915]: Ignition 2.14.0 Oct 2 19:20:43.498883 systemd[1]: Starting ignition-disks.service... Oct 2 19:20:43.505829 ignition[915]: Stage: disks Oct 2 19:20:43.505901 ignition[915]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:20:43.505911 ignition[915]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Oct 2 19:20:43.507221 ignition[915]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Oct 2 19:20:43.508393 ignition[915]: disks: disks passed Oct 2 19:20:43.508397 ignition[915]: POST message to Packet Timeline Oct 2 19:20:43.508406 ignition[915]: GET https://metadata.packet.net/metadata: attempt #1 Oct 2 19:20:43.530552 ignition[915]: GET result: OK Oct 2 19:20:43.688778 ignition[915]: Ignition finished successfully Oct 2 19:20:43.692014 systemd[1]: Finished ignition-disks.service. Oct 2 19:20:43.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:43.705150 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:20:43.790708 kernel: audit: type=1130 audit(1696274443.704:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:43.776653 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:20:43.776766 systemd[1]: Reached target local-fs.target. Oct 2 19:20:43.798691 systemd[1]: Reached target sysinit.target. Oct 2 19:20:43.812645 systemd[1]: Reached target basic.target. Oct 2 19:20:43.813352 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:20:43.844276 systemd-fsck[932]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:20:43.857076 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:20:43.940688 kernel: audit: type=1130 audit(1696274443.856:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:43.940701 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:20:43.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:43.859151 systemd[1]: Mounting sysroot.mount... Oct 2 19:20:43.948204 systemd[1]: Mounted sysroot.mount. Oct 2 19:20:43.962776 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:20:43.969439 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:20:43.994365 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:20:44.003076 systemd[1]: Starting flatcar-static-network.service... Oct 2 19:20:44.019604 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:20:44.019709 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:20:44.038122 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:20:44.061644 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:20:44.171546 kernel: BTRFS: device label OEM devid 1 transid 16 /dev/sda6 scanned by mount (944) Oct 2 19:20:44.171563 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:20:44.171572 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:20:44.171583 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:20:44.075044 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:20:44.257722 kernel: BTRFS info (device sda6): enabling ssd optimizations Oct 2 19:20:44.257735 kernel: audit: type=1130 audit(1696274444.185:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.257767 coreos-metadata[940]: Oct 02 19:20:44.124 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Oct 2 19:20:44.257767 coreos-metadata[940]: Oct 02 19:20:44.146 INFO Fetch successful Oct 2 19:20:44.257767 coreos-metadata[940]: Oct 02 19:20:44.164 INFO wrote hostname ci-3510.3.0-a-a82eb4d27c to /sysroot/etc/hostname Oct 2 19:20:44.463738 kernel: audit: type=1130 audit(1696274444.266:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.463752 kernel: audit: type=1130 audit(1696274444.329:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.463759 kernel: audit: type=1131 audit(1696274444.329:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.463822 coreos-metadata[941]: Oct 02 19:20:44.124 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Oct 2 19:20:44.463822 coreos-metadata[941]: Oct 02 19:20:44.145 INFO Fetch successful Oct 2 19:20:44.497534 initrd-setup-root[951]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:20:44.116613 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:20:44.579730 kernel: audit: type=1130 audit(1696274444.516:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.579806 initrd-setup-root[959]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:20:44.185745 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:20:44.598730 initrd-setup-root[967]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:20:44.267758 systemd[1]: flatcar-static-network.service: Deactivated successfully. Oct 2 19:20:44.618843 initrd-setup-root[975]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:20:44.267798 systemd[1]: Finished flatcar-static-network.service. Oct 2 19:20:44.636696 ignition[1016]: INFO : Ignition 2.14.0 Oct 2 19:20:44.636696 ignition[1016]: INFO : Stage: mount Oct 2 19:20:44.636696 ignition[1016]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:20:44.636696 ignition[1016]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Oct 2 19:20:44.636696 ignition[1016]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Oct 2 19:20:44.636696 ignition[1016]: INFO : mount: mount passed Oct 2 19:20:44.636696 ignition[1016]: INFO : POST message to Packet Timeline Oct 2 19:20:44.636696 ignition[1016]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Oct 2 19:20:44.636696 ignition[1016]: INFO : GET result: OK Oct 2 19:20:44.819611 kernel: audit: type=1130 audit(1696274444.701:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.819628 kernel: BTRFS: device label OEM devid 1 transid 17 /dev/sda6 scanned by mount (1032) Oct 2 19:20:44.819635 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:20:44.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:44.329740 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:20:44.910711 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:20:44.910722 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:20:44.910731 kernel: BTRFS info (device sda6): enabling ssd optimizations Oct 2 19:20:44.910745 ignition[1016]: INFO : Ignition finished successfully Oct 2 19:20:44.451071 systemd[1]: Starting ignition-mount.service... Oct 2 19:20:44.471057 systemd[1]: Starting sysroot-boot.service... Oct 2 19:20:44.485681 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:20:44.953580 ignition[1051]: INFO : Ignition 2.14.0 Oct 2 19:20:44.953580 ignition[1051]: INFO : Stage: files Oct 2 19:20:44.953580 ignition[1051]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:20:44.953580 ignition[1051]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Oct 2 19:20:44.953580 ignition[1051]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Oct 2 19:20:44.953580 ignition[1051]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:20:44.953580 ignition[1051]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:20:44.953580 ignition[1051]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:20:44.953580 ignition[1051]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:20:44.953580 ignition[1051]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:20:44.953580 ignition[1051]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:20:44.953580 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:20:44.953580 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:20:44.485894 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:20:44.500793 systemd[1]: Finished sysroot-boot.service. Oct 2 19:20:45.136777 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:20:44.688550 systemd[1]: Finished ignition-mount.service. Oct 2 19:20:44.704090 systemd[1]: Starting ignition-files.service... Oct 2 19:20:44.768433 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:20:44.905446 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:20:44.931877 unknown[1051]: wrote ssh authorized keys file for user: core Oct 2 19:20:45.246764 ignition[1051]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:20:45.272719 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:20:45.272719 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:20:45.272719 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.24.2/crictl-v1.24.2-linux-amd64.tar.gz: attempt #1 Oct 2 19:20:45.341838 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:20:45.376868 ignition[1051]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 961188117863ca9af5b084e84691e372efee93ad09daf6a0422e8d75a5803f394d8968064f7ca89f14e8973766201e731241f32538cf2c8d91f0233e786302df Oct 2 19:20:45.376868 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:20:45.418761 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:20:45.418761 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:20:45.491969 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:20:45.846821 ignition[1051]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 43b8f213f1732c092e34008d5334e6622a6603f7ec5890c395ac911d50069d0dc11a81fa38436df40fc875a10fee6ee13aa285c017f1de210171065e847c99c5 Oct 2 19:20:45.846821 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:20:45.886800 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:20:45.886800 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:20:45.922773 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:20:46.577196 ignition[1051]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 82b36a0b83a1d48ef1f70e3ed2a263b3ce935304cdc0606d194b290217fb04f98628b0d82e200b51ccf5c05c718b2476274ae710bb143fffe28dc6bbf8407d54 Oct 2 19:20:46.602694 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:20:46.602694 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:20:46.602694 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:20:46.667128 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:20:46.942209 ignition[1051]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 9006cd791c99f5421c09ae8f6029fdd0ea4608909f590dea41ba4dd5c500440272e9ece21489d1f192966717987251ded5394ea1dd4c5d091b700ac1c8cfa392 Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/systemd/system/packet-phone-home.service" Oct 2 19:20:46.966792 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:20:47.142801 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1055) Oct 2 19:20:47.142873 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2801708800" Oct 2 19:20:47.142873 ignition[1051]: CRITICAL : files: createFilesystemsFiles: createFiles: op(b): op(c): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2801708800": device or resource busy Oct 2 19:20:47.142873 ignition[1051]: ERROR : files: createFilesystemsFiles: createFiles: op(b): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2801708800", trying btrfs: device or resource busy Oct 2 19:20:47.142873 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2801708800" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(d): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2801708800" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(e): [started] unmounting "/mnt/oem2801708800" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): op(e): [finished] unmounting "/mnt/oem2801708800" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/systemd/system/packet-phone-home.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(f): [started] processing unit "packet-phone-home.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(f): [finished] processing unit "packet-phone-home.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(11): [started] processing unit "prepare-critools.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(11): op(12): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(11): op(12): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(11): [finished] processing unit "prepare-critools.service" Oct 2 19:20:47.142873 ignition[1051]: INFO : files: op(13): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:20:47.509609 kernel: audit: type=1130 audit(1696274447.244:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.224200 systemd[1]: Finished ignition-files.service. Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(13): op(14): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(13): op(14): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(13): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(16): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(17): [started] setting preset to enabled for "packet-phone-home.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(17): [finished] setting preset to enabled for "packet-phone-home.service" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:20:47.533657 ignition[1051]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:20:47.533657 ignition[1051]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:20:47.533657 ignition[1051]: INFO : files: files passed Oct 2 19:20:47.533657 ignition[1051]: INFO : POST message to Packet Timeline Oct 2 19:20:47.533657 ignition[1051]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Oct 2 19:20:47.533657 ignition[1051]: INFO : GET result: OK Oct 2 19:20:47.533657 ignition[1051]: INFO : Ignition finished successfully Oct 2 19:20:47.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.253034 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:20:47.926955 initrd-setup-root-after-ignition[1084]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:20:47.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.317721 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:20:47.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.318048 systemd[1]: Starting ignition-quench.service... Oct 2 19:20:47.354773 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:20:47.365937 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:20:47.365997 systemd[1]: Finished ignition-quench.service. Oct 2 19:20:47.393851 systemd[1]: Reached target ignition-complete.target. Oct 2 19:20:48.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.408127 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:20:48.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.433189 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:20:48.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.433248 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:20:48.104690 ignition[1099]: INFO : Ignition 2.14.0 Oct 2 19:20:48.104690 ignition[1099]: INFO : Stage: umount Oct 2 19:20:48.104690 ignition[1099]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:20:48.104690 ignition[1099]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Oct 2 19:20:48.104690 ignition[1099]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Oct 2 19:20:48.104690 ignition[1099]: INFO : umount: umount passed Oct 2 19:20:48.104690 ignition[1099]: INFO : POST message to Packet Timeline Oct 2 19:20:48.104690 ignition[1099]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Oct 2 19:20:48.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.244141 iscsid[896]: iscsid shutting down. Oct 2 19:20:48.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.443991 systemd[1]: Reached target initrd-fs.target. Oct 2 19:20:48.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.272841 ignition[1099]: INFO : GET result: OK Oct 2 19:20:47.467850 systemd[1]: Reached target initrd.target. Oct 2 19:20:48.302764 ignition[1099]: INFO : Ignition finished successfully Oct 2 19:20:47.498995 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:20:47.501263 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:20:48.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.526840 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:20:48.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.543479 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:20:48.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.376000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:20:47.582775 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:20:47.595179 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:20:48.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.616233 systemd[1]: Stopped target timers.target. Oct 2 19:20:48.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.636168 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:20:48.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.636556 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:20:48.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.658478 systemd[1]: Stopped target initrd.target. Oct 2 19:20:47.679156 systemd[1]: Stopped target basic.target. Oct 2 19:20:48.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.700162 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:20:48.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.721171 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:20:48.592677 kernel: kauditd_printk_skb: 29 callbacks suppressed Oct 2 19:20:48.592690 kernel: audit: type=1131 audit(1696274448.505:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.743146 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:20:48.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.659493 kernel: audit: type=1131 audit(1696274448.601:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.765167 systemd[1]: Stopped target remote-fs.target. Oct 2 19:20:47.788177 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:20:47.812190 systemd[1]: Stopped target sysinit.target. Oct 2 19:20:48.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.837197 systemd[1]: Stopped target local-fs.target. Oct 2 19:20:48.760696 kernel: audit: type=1131 audit(1696274448.688:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.852174 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:20:47.868151 systemd[1]: Stopped target swap.target. Oct 2 19:20:48.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.885073 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:20:48.913561 kernel: audit: type=1131 audit(1696274448.783:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.913572 kernel: audit: type=1131 audit(1696274448.848:74): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.885442 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:20:48.985696 kernel: audit: type=1131 audit(1696274448.921:75): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.900423 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:20:47.917087 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:20:49.074584 kernel: audit: type=1131 audit(1696274449.007:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:49.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.917452 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:20:49.134580 kernel: audit: type=1131 audit(1696274449.074:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:49.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.937334 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:20:49.211561 kernel: audit: type=1131 audit(1696274449.142:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:49.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.937717 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:20:49.286601 kernel: audit: type=1130 audit(1696274449.219:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:49.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:49.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.959335 systemd[1]: Stopped target paths.target. Oct 2 19:20:47.983991 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:20:47.987686 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:20:48.000179 systemd[1]: Stopped target slices.target. Oct 2 19:20:48.015166 systemd[1]: Stopped target sockets.target. Oct 2 19:20:48.031088 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:20:48.031471 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:20:48.048169 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:20:48.048527 systemd[1]: Stopped ignition-files.service. Oct 2 19:20:49.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.065156 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:20:48.065537 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:20:48.084184 systemd[1]: Stopping ignition-mount.service... Oct 2 19:20:48.096701 systemd[1]: Stopping iscsid.service... Oct 2 19:20:48.112179 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:20:48.126553 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:20:48.126702 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:20:48.133840 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:20:48.133963 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:20:48.167606 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:20:48.169605 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:20:48.169840 systemd[1]: Stopped iscsid.service. Oct 2 19:20:48.186981 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:20:48.187145 systemd[1]: Closed iscsid.socket. Oct 2 19:20:48.203931 systemd[1]: Stopping iscsiuio.service... Oct 2 19:20:48.219128 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:20:48.219328 systemd[1]: Stopped iscsiuio.service. Oct 2 19:20:48.234292 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:20:48.234480 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:20:48.252473 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:20:48.252689 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:20:48.267744 systemd[1]: Stopped target network.target. Oct 2 19:20:48.280835 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:20:48.280927 systemd[1]: Closed iscsiuio.socket. Oct 2 19:20:48.295088 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:20:48.303650 systemd-networkd[869]: enp1s0f1np1: DHCPv6 lease lost Oct 2 19:20:48.309983 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:20:48.311703 systemd-networkd[869]: enp1s0f0np0: DHCPv6 lease lost Oct 2 19:20:49.442000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:20:48.325323 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:20:48.325551 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:20:48.345721 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:20:48.345952 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:20:48.362149 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:20:48.362369 systemd[1]: Stopped ignition-mount.service. Oct 2 19:20:48.377131 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:20:48.377218 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:20:48.391747 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:20:48.391865 systemd[1]: Stopped ignition-disks.service. Oct 2 19:20:48.407802 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:20:48.407913 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:20:49.443500 systemd-journald[269]: Received SIGTERM from PID 1 (n/a). Oct 2 19:20:48.424869 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:20:48.425002 systemd[1]: Stopped ignition-setup.service. Oct 2 19:20:48.441886 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:20:48.442033 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:20:48.460610 systemd[1]: Stopping network-cleanup.service... Oct 2 19:20:48.473760 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:20:48.473933 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:20:48.489879 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:20:48.490012 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:20:48.584664 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:20:48.584697 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:20:48.601861 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:20:48.667383 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:20:48.667703 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:20:48.667761 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:20:48.689168 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:20:48.689196 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:20:48.753811 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:20:48.753893 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:20:48.768688 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:20:48.768830 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:20:48.783792 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:20:48.783894 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:20:48.848628 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:20:48.848654 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:20:48.922020 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:20:48.993577 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:20:48.993603 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:20:49.066610 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:20:49.066645 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:20:49.074717 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:20:49.074747 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:20:49.143158 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:20:49.143397 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:20:49.143434 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:20:49.343786 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:20:49.343826 systemd[1]: Stopped network-cleanup.service. Oct 2 19:20:49.359716 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:20:49.376142 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:20:49.399958 systemd[1]: Switching root. Oct 2 19:20:49.444414 systemd-journald[269]: Journal stopped Oct 2 19:20:53.035538 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:20:53.035567 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:20:53.035590 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:20:53.035595 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:20:53.035600 kernel: SELinux: policy capability open_perms=1 Oct 2 19:20:53.035606 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:20:53.035612 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:20:53.035617 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:20:53.035622 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:20:53.035628 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:20:53.035634 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:20:53.035640 systemd[1]: Successfully loaded SELinux policy in 301.813ms. Oct 2 19:20:53.035646 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.084ms. Oct 2 19:20:53.035653 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:20:53.035661 systemd[1]: Detected architecture x86-64. Oct 2 19:20:53.035667 systemd[1]: Detected first boot. Oct 2 19:20:53.035672 systemd[1]: Hostname set to . Oct 2 19:20:53.035679 systemd[1]: Initializing machine ID from random generator. Oct 2 19:20:53.035685 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:20:53.035691 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:20:53.035697 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:20:53.035705 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:20:53.035711 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:20:53.035717 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:20:53.035723 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:20:53.035730 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:20:53.035736 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:20:53.035743 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:20:53.035749 systemd[1]: Created slice system-getty.slice. Oct 2 19:20:53.035755 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:20:53.035761 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:20:53.035768 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:20:53.035774 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:20:53.035780 systemd[1]: Created slice user.slice. Oct 2 19:20:53.035786 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:20:53.035792 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:20:53.035799 systemd[1]: Set up automount boot.automount. Oct 2 19:20:53.035805 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:20:53.035811 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:20:53.035817 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:20:53.035825 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:20:53.035831 systemd[1]: Reached target integritysetup.target. Oct 2 19:20:53.035837 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:20:53.035844 systemd[1]: Reached target remote-fs.target. Oct 2 19:20:53.035851 systemd[1]: Reached target slices.target. Oct 2 19:20:53.035857 systemd[1]: Reached target swap.target. Oct 2 19:20:53.035864 systemd[1]: Reached target torcx.target. Oct 2 19:20:53.035870 systemd[1]: Reached target veritysetup.target. Oct 2 19:20:53.035877 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:20:53.035883 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:20:53.035889 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:20:53.035897 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:20:53.035904 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:20:53.035910 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:20:53.035916 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:20:53.035923 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:20:53.035929 systemd[1]: Mounting media.mount... Oct 2 19:20:53.035936 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:20:53.035943 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:20:53.035950 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:20:53.035956 systemd[1]: Mounting tmp.mount... Oct 2 19:20:53.035962 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:20:53.035969 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:20:53.035975 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:20:53.035981 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:20:53.035988 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:20:53.035994 systemd[1]: Starting modprobe@drm.service... Oct 2 19:20:53.036002 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:20:53.036008 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:20:53.036015 kernel: fuse: init (API version 7.34) Oct 2 19:20:53.036021 systemd[1]: Starting modprobe@loop.service... Oct 2 19:20:53.036027 kernel: loop: module loaded Oct 2 19:20:53.036033 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:20:53.036039 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:20:53.036046 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:20:53.036053 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:20:53.036060 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:20:53.036067 systemd[1]: Stopped systemd-journald.service. Oct 2 19:20:53.036073 systemd[1]: Starting systemd-journald.service... Oct 2 19:20:53.036079 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:20:53.036087 systemd-journald[1251]: Journal started Oct 2 19:20:53.036112 systemd-journald[1251]: Runtime Journal (/run/log/journal/3b94d0a66c42448399c34efe3c491a31) is 8.0M, max 640.1M, 632.1M free. Oct 2 19:20:49.824000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:20:50.094000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:20:50.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:20:50.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:20:50.096000 audit: BPF prog-id=10 op=LOAD Oct 2 19:20:50.096000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:20:50.096000 audit: BPF prog-id=11 op=LOAD Oct 2 19:20:50.096000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:20:51.699000 audit: BPF prog-id=12 op=LOAD Oct 2 19:20:51.699000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:20:51.699000 audit: BPF prog-id=13 op=LOAD Oct 2 19:20:51.699000 audit: BPF prog-id=14 op=LOAD Oct 2 19:20:51.699000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:20:51.699000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:20:51.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:51.752000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:20:51.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:51.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:52.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:52.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.008000 audit: BPF prog-id=15 op=LOAD Oct 2 19:20:53.008000 audit: BPF prog-id=16 op=LOAD Oct 2 19:20:53.008000 audit: BPF prog-id=17 op=LOAD Oct 2 19:20:53.008000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:20:53.008000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:20:53.033000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:20:53.033000 audit[1251]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffc241caec0 a2=4000 a3=7ffc241caf5c items=0 ppid=1 pid=1251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:53.033000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:20:50.166658 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:20:51.698100 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:20:50.167247 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:20:51.700626 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:20:50.167265 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:20:50.167292 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:20:50.167302 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:20:50.167329 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:20:50.167341 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:20:50.167522 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:20:50.167557 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:20:50.167568 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:20:50.168019 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:20:50.168050 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:20:50.168066 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:20:50.168079 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:20:50.168094 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:20:50.168107 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:20:51.346183 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:51Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:20:51.346340 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:51Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:20:51.346398 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:51Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:20:51.346495 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:51Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:20:51.346525 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:51Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:20:51.346559 /usr/lib/systemd/system-generators/torcx-generator[1141]: time="2023-10-02T19:20:51Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:20:53.066670 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:20:53.088506 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:20:53.109614 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:20:53.143017 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:20:53.143113 systemd[1]: Stopped verity-setup.service. Oct 2 19:20:53.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.177534 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:20:53.191551 systemd[1]: Started systemd-journald.service. Oct 2 19:20:53.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.200985 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:20:53.208728 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:20:53.216728 systemd[1]: Mounted media.mount. Oct 2 19:20:53.223746 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:20:53.232705 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:20:53.240688 systemd[1]: Mounted tmp.mount. Oct 2 19:20:53.247797 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:20:53.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.255817 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:20:53.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.263846 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:20:53.263965 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:20:53.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.272924 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:20:53.273079 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:20:53.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.282240 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:20:53.282475 systemd[1]: Finished modprobe@drm.service. Oct 2 19:20:53.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.291289 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:20:53.291606 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:20:53.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.300284 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:20:53.300601 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:20:53.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.310354 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:20:53.310674 systemd[1]: Finished modprobe@loop.service. Oct 2 19:20:53.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.319340 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:20:53.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.328262 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:20:53.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.337261 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:20:53.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.346385 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:20:53.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.355879 systemd[1]: Reached target network-pre.target. Oct 2 19:20:53.368331 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:20:53.378200 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:20:53.386705 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:20:53.387742 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:20:53.396149 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:20:53.399745 systemd-journald[1251]: Time spent on flushing to /var/log/journal/3b94d0a66c42448399c34efe3c491a31 is 14.972ms for 1579 entries. Oct 2 19:20:53.399745 systemd-journald[1251]: System Journal (/var/log/journal/3b94d0a66c42448399c34efe3c491a31) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:20:53.439464 systemd-journald[1251]: Received client request to flush runtime journal. Oct 2 19:20:53.412587 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:20:53.413169 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:20:53.424601 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:20:53.425122 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:20:53.432255 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:20:53.439089 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:20:53.446681 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:20:53.454667 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:20:53.462705 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:20:53.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.471709 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:20:53.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.479679 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:20:53.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.488678 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:20:53.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.497683 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:20:53.507229 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:20:53.516544 udevadm[1267]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:20:53.525355 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:20:53.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.547549 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 2 19:20:53.547600 kernel: audit: type=1130 audit(1696274453.533:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.705987 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:20:53.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.757000 audit: BPF prog-id=18 op=LOAD Oct 2 19:20:53.775742 kernel: audit: type=1130 audit(1696274453.714:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.775775 kernel: audit: type=1334 audit(1696274453.757:137): prog-id=18 op=LOAD Oct 2 19:20:53.775000 audit: BPF prog-id=19 op=LOAD Oct 2 19:20:53.776169 systemd[1]: Starting systemd-udevd.service... Oct 2 19:20:53.793356 kernel: audit: type=1334 audit(1696274453.775:138): prog-id=19 op=LOAD Oct 2 19:20:53.793384 kernel: audit: type=1334 audit(1696274453.775:139): prog-id=7 op=UNLOAD Oct 2 19:20:53.793397 kernel: audit: type=1334 audit(1696274453.775:140): prog-id=8 op=UNLOAD Oct 2 19:20:53.775000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:20:53.775000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:20:53.839267 systemd-udevd[1270]: Using default interface naming scheme 'v252'. Oct 2 19:20:53.860239 systemd[1]: Started systemd-udevd.service. Oct 2 19:20:53.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.870642 systemd[1]: Condition check resulted in dev-ttyS1.device being skipped. Oct 2 19:20:53.911000 audit: BPF prog-id=20 op=LOAD Oct 2 19:20:53.912652 kernel: audit: type=1130 audit(1696274453.868:141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:53.912686 kernel: audit: type=1334 audit(1696274453.911:142): prog-id=20 op=LOAD Oct 2 19:20:53.913090 systemd[1]: Starting systemd-networkd.service... Oct 2 19:20:53.931496 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input2 Oct 2 19:20:53.931553 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1283) Oct 2 19:20:53.973392 kernel: ACPI: button: Sleep Button [SLPB] Oct 2 19:20:54.010814 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 19:20:54.012869 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:20:54.029491 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:20:54.029526 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:20:53.919000 audit[1285]: AVC avc: denied { confidentiality } for pid=1285 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:20:54.063495 kernel: IPMI message handler: version 39.2 Oct 2 19:20:54.063556 kernel: audit: type=1400 audit(1696274453.919:143): avc: denied { confidentiality } for pid=1285 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:20:54.144540 kernel: ipmi device interface Oct 2 19:20:53.919000 audit[1285]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=7fbb485c5010 a1=4d8bc a2=7fbb4a25fbc5 a3=5 items=40 ppid=1270 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:53.919000 audit: CWD cwd="/" Oct 2 19:20:53.919000 audit: PATH item=0 name=(null) inode=27940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=1 name=(null) inode=27941 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=2 name=(null) inode=27940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=3 name=(null) inode=27942 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=4 name=(null) inode=27940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=5 name=(null) inode=27943 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=6 name=(null) inode=27943 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=7 name=(null) inode=27944 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=8 name=(null) inode=27943 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=9 name=(null) inode=27945 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=10 name=(null) inode=27943 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=11 name=(null) inode=27946 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=12 name=(null) inode=27943 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=13 name=(null) inode=27947 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=14 name=(null) inode=27943 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=15 name=(null) inode=27948 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=16 name=(null) inode=27940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=17 name=(null) inode=27949 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=18 name=(null) inode=27949 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=19 name=(null) inode=27950 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=20 name=(null) inode=27949 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=21 name=(null) inode=27951 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=22 name=(null) inode=27949 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:54.221501 kernel: audit: type=1300 audit(1696274453.919:143): arch=c000003e syscall=175 success=yes exit=0 a0=7fbb485c5010 a1=4d8bc a2=7fbb4a25fbc5 a3=5 items=40 ppid=1270 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:53.919000 audit: PATH item=23 name=(null) inode=27952 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=24 name=(null) inode=27949 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=25 name=(null) inode=27953 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=26 name=(null) inode=27949 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=27 name=(null) inode=27954 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=28 name=(null) inode=27940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=29 name=(null) inode=27955 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=30 name=(null) inode=27955 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=31 name=(null) inode=27956 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=32 name=(null) inode=27955 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=33 name=(null) inode=27957 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=34 name=(null) inode=27955 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=35 name=(null) inode=27958 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=36 name=(null) inode=27955 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=37 name=(null) inode=27959 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=38 name=(null) inode=27955 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PATH item=39 name=(null) inode=27960 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:20:53.919000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:20:54.220000 audit: BPF prog-id=21 op=LOAD Oct 2 19:20:54.220000 audit: BPF prog-id=22 op=LOAD Oct 2 19:20:54.220000 audit: BPF prog-id=23 op=LOAD Oct 2 19:20:54.221685 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:20:54.238279 systemd[1]: Started systemd-userdbd.service. Oct 2 19:20:54.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:54.281951 kernel: i801_smbus 0000:00:1f.4: SPD Write Disable is set Oct 2 19:20:54.282102 kernel: i801_smbus 0000:00:1f.4: SMBus using PCI interrupt Oct 2 19:20:54.302492 kernel: i2c i2c-0: 1/4 memory slots populated (from DMI) Oct 2 19:20:54.344737 kernel: ipmi_si: IPMI System Interface driver Oct 2 19:20:54.344765 kernel: ipmi_si dmi-ipmi-si.0: ipmi_platform: probing via SMBIOS Oct 2 19:20:54.344852 kernel: ipmi_platform: ipmi_si: SMBIOS: io 0xca2 regsize 1 spacing 1 irq 0 Oct 2 19:20:54.365307 kernel: ipmi_si: Adding SMBIOS-specified kcs state machine Oct 2 19:20:54.425107 kernel: ipmi_si IPI0001:00: ipmi_platform: probing via ACPI Oct 2 19:20:54.425215 kernel: ipmi_si IPI0001:00: ipmi_platform: [io 0x0ca2] regsize 1 spacing 1 irq 0 Oct 2 19:20:54.426491 kernel: iTCO_vendor_support: vendor-support=0 Oct 2 19:20:54.426525 kernel: mei_me 0000:00:16.4: Device doesn't have valid ME Interface Oct 2 19:20:54.426642 kernel: mei_me 0000:00:16.0: Device doesn't have valid ME Interface Oct 2 19:20:54.528076 kernel: ipmi_si dmi-ipmi-si.0: Removing SMBIOS-specified kcs state machine in favor of ACPI Oct 2 19:20:54.528207 kernel: ipmi_si: Adding ACPI-specified kcs state machine Oct 2 19:20:54.528220 kernel: ipmi_si: Trying ACPI-specified kcs state machine at i/o address 0xca2, slave address 0x20, irq 0 Oct 2 19:20:54.629539 kernel: iTCO_wdt iTCO_wdt: Found a Intel PCH TCO device (Version=6, TCOBASE=0x0400) Oct 2 19:20:54.629656 kernel: ipmi_si IPI0001:00: The BMC does not support clearing the recv irq bit, compensating, but the BMC needs to be fixed. Oct 2 19:20:54.629730 kernel: iTCO_wdt iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0) Oct 2 19:20:54.651530 kernel: ipmi_si IPI0001:00: IPMI message handler: Found new BMC (man_id: 0x002a7c, prod_id: 0x1b0f, dev_id: 0x20) Oct 2 19:20:54.713011 systemd-networkd[1349]: bond0: netdev ready Oct 2 19:20:54.715329 systemd-networkd[1349]: lo: Link UP Oct 2 19:20:54.715332 systemd-networkd[1349]: lo: Gained carrier Oct 2 19:20:54.715827 systemd-networkd[1349]: Enumeration completed Oct 2 19:20:54.715912 systemd[1]: Started systemd-networkd.service. Oct 2 19:20:54.716134 systemd-networkd[1349]: bond0: Configuring with /etc/systemd/network/05-bond0.network. Oct 2 19:20:54.723824 systemd-networkd[1349]: enp1s0f1np1: Configuring with /etc/systemd/network/10-b8:59:9f:de:84:f9.network. Oct 2 19:20:54.727213 kernel: intel_rapl_common: Found RAPL domain package Oct 2 19:20:54.727241 kernel: intel_rapl_common: Found RAPL domain core Oct 2 19:20:54.727257 kernel: intel_rapl_common: Found RAPL domain dram Oct 2 19:20:54.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:54.782490 kernel: ipmi_si IPI0001:00: IPMI kcs interface initialized Oct 2 19:20:54.803490 kernel: ipmi_ssif: IPMI SSIF Interface driver Oct 2 19:20:54.806745 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:20:54.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:54.816220 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:20:54.833507 lvm[1374]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:20:54.877881 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:20:54.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:54.886610 systemd[1]: Reached target cryptsetup.target. Oct 2 19:20:54.895160 systemd[1]: Starting lvm2-activation.service... Oct 2 19:20:54.897200 lvm[1375]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:20:54.940880 systemd[1]: Finished lvm2-activation.service. Oct 2 19:20:54.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:54.948612 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:20:54.956565 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:20:54.956580 systemd[1]: Reached target local-fs.target. Oct 2 19:20:54.964565 systemd[1]: Reached target machines.target. Oct 2 19:20:54.973141 systemd[1]: Starting ldconfig.service... Oct 2 19:20:54.979977 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:20:54.980021 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:20:54.980531 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:20:54.988068 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:20:54.998202 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:20:54.998457 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:20:54.998483 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:20:54.999223 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:20:54.999433 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1377 (bootctl) Oct 2 19:20:55.000322 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:20:55.014910 systemd-tmpfiles[1381]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:20:55.018893 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:20:55.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:55.019891 systemd-tmpfiles[1381]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:20:55.022072 systemd-tmpfiles[1381]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:20:55.466353 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:20:55.466822 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:20:55.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:55.489444 systemd-fsck[1385]: fsck.fat 4.2 (2021-01-31) Oct 2 19:20:55.489444 systemd-fsck[1385]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:20:55.490348 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:20:55.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:55.501398 systemd[1]: Mounting boot.mount... Oct 2 19:20:55.512651 systemd[1]: Mounted boot.mount. Oct 2 19:20:55.530841 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:20:55.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:55.566536 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:20:55.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:55.576328 systemd[1]: Starting audit-rules.service... Oct 2 19:20:55.584077 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:20:55.593110 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:20:55.594000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:20:55.594000 audit[1406]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc9591f2e0 a2=420 a3=0 items=0 ppid=1389 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:55.594000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:20:55.595316 augenrules[1406]: No rules Oct 2 19:20:55.602435 systemd[1]: Starting systemd-resolved.service... Oct 2 19:20:55.610408 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:20:55.618007 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:20:55.624776 systemd[1]: Finished audit-rules.service. Oct 2 19:20:55.631648 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:20:55.639642 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:20:55.651217 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:20:55.659578 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:20:55.676535 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:20:55.679433 systemd-resolved[1411]: Positive Trust Anchors: Oct 2 19:20:55.679438 systemd-resolved[1411]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:20:55.679457 systemd-resolved[1411]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:20:55.683766 systemd-resolved[1411]: Using system hostname 'ci-3510.3.0-a-a82eb4d27c'. Oct 2 19:20:55.685579 systemd[1]: Reached target time-set.target. Oct 2 19:20:55.706551 ldconfig[1376]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:20:55.709311 systemd[1]: Finished ldconfig.service. Oct 2 19:20:55.717230 systemd[1]: Starting systemd-update-done.service... Oct 2 19:20:55.723676 systemd[1]: Finished systemd-update-done.service. Oct 2 19:20:55.797490 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Oct 2 19:20:55.822494 kernel: bond0: (slave enp1s0f1np1): Enslaving as a backup interface with an up link Oct 2 19:20:55.826515 systemd-networkd[1349]: enp1s0f0np0: Configuring with /etc/systemd/network/10-b8:59:9f:de:84:f8.network. Oct 2 19:20:55.881513 kernel: bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond Oct 2 19:20:56.007516 kernel: bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond Oct 2 19:20:56.118530 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: Link up Oct 2 19:20:56.162235 kernel: bond0: (slave enp1s0f0np0): Enslaving as a backup interface with an up link Oct 2 19:20:56.162267 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready Oct 2 19:20:56.163830 systemd-networkd[1349]: bond0: Link UP Oct 2 19:20:56.164090 systemd-networkd[1349]: enp1s0f1np1: Link UP Oct 2 19:20:56.164241 systemd[1]: Started systemd-resolved.service. Oct 2 19:20:56.164264 systemd-networkd[1349]: enp1s0f1np1: Gained carrier Oct 2 19:20:56.165600 systemd-networkd[1349]: enp1s0f1np1: Reconfiguring with /etc/systemd/network/10-b8:59:9f:de:84:f8.network. Oct 2 19:20:56.180635 systemd[1]: Reached target network.target. Oct 2 19:20:56.188542 kernel: bond0: (slave enp1s0f1np1): link status definitely up, 25000 Mbps full duplex Oct 2 19:20:56.188569 kernel: bond0: active interface up! Oct 2 19:20:56.221572 systemd[1]: Reached target nss-lookup.target. Oct 2 19:20:56.228551 kernel: bond0: (slave enp1s0f0np0): link status definitely up, 25000 Mbps full duplex Oct 2 19:20:56.236569 systemd[1]: Reached target sysinit.target. Oct 2 19:20:56.245640 systemd[1]: Started motdgen.path. Oct 2 19:20:56.253544 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:20:56.263732 systemd[1]: Started logrotate.timer. Oct 2 19:20:56.271625 systemd[1]: Started mdadm.timer. Oct 2 19:20:56.279522 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:20:56.287518 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:20:56.287530 systemd[1]: Reached target paths.target. Oct 2 19:20:56.294516 systemd[1]: Reached target timers.target. Oct 2 19:20:56.302647 systemd[1]: Listening on dbus.socket. Oct 2 19:20:56.310060 systemd[1]: Starting docker.socket... Oct 2 19:20:56.318791 systemd[1]: Listening on sshd.socket. Oct 2 19:20:56.326600 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:20:56.326818 systemd[1]: Listening on docker.socket. Oct 2 19:20:56.334644 systemd-networkd[1349]: enp1s0f0np0: Link UP Oct 2 19:20:56.334843 systemd-networkd[1349]: bond0: Gained carrier Oct 2 19:20:56.334943 systemd-networkd[1349]: enp1s0f0np0: Gained carrier Oct 2 19:20:56.334993 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:56.343768 systemd[1]: Reached target sockets.target. Oct 2 19:20:56.352490 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Oct 2 19:20:56.352525 kernel: bond0: (slave enp1s0f1np1): invalid new link 1 on slave Oct 2 19:20:56.376671 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:56.376796 systemd-networkd[1349]: enp1s0f1np1: Link DOWN Oct 2 19:20:56.376798 systemd-networkd[1349]: enp1s0f1np1: Lost carrier Oct 2 19:20:56.380521 systemd[1]: Reached target basic.target. Oct 2 19:20:56.385671 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:56.385841 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:56.387538 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:20:56.387552 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:20:56.388008 systemd[1]: Starting containerd.service... Oct 2 19:20:56.394963 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:20:56.404014 systemd[1]: Starting coreos-metadata.service... Oct 2 19:20:56.411044 systemd[1]: Starting dbus.service... Oct 2 19:20:56.417216 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:20:56.421845 jq[1427]: false Oct 2 19:20:56.425075 coreos-metadata[1420]: Oct 02 19:20:56.425 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Oct 2 19:20:56.425132 systemd[1]: Starting extend-filesystems.service... Oct 2 19:20:56.428885 dbus-daemon[1426]: [system] SELinux support is enabled Oct 2 19:20:56.432568 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:20:56.433147 extend-filesystems[1428]: Found sda Oct 2 19:20:56.433147 extend-filesystems[1428]: Found sda1 Oct 2 19:20:56.476587 kernel: EXT4-fs (sda9): resizing filesystem from 553472 to 116605649 blocks Oct 2 19:20:56.433216 systemd[1]: Starting motdgen.service... Oct 2 19:20:56.476742 coreos-metadata[1423]: Oct 02 19:20:56.433 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Oct 2 19:20:56.476848 extend-filesystems[1428]: Found sda2 Oct 2 19:20:56.476848 extend-filesystems[1428]: Found sda3 Oct 2 19:20:56.476848 extend-filesystems[1428]: Found usr Oct 2 19:20:56.476848 extend-filesystems[1428]: Found sda4 Oct 2 19:20:56.476848 extend-filesystems[1428]: Found sda6 Oct 2 19:20:56.476848 extend-filesystems[1428]: Found sda7 Oct 2 19:20:56.476848 extend-filesystems[1428]: Found sda9 Oct 2 19:20:56.476848 extend-filesystems[1428]: Checking size of /dev/sda9 Oct 2 19:20:56.476848 extend-filesystems[1428]: Resized partition /dev/sda9 Oct 2 19:20:56.645583 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Oct 2 19:20:56.645689 kernel: bond0: (slave enp1s0f1np1): link status up again after 200 ms Oct 2 19:20:56.645702 kernel: bond0: (slave enp1s0f1np1): speed changed to 0 on port 1 Oct 2 19:20:56.645714 kernel: bond0: (slave enp1s0f1np1): link status up again after 200 ms Oct 2 19:20:56.645725 kernel: bond0: (slave enp1s0f1np1): link status definitely up, 25000 Mbps full duplex Oct 2 19:20:56.433870 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:20:56.645796 extend-filesystems[1445]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:20:56.464037 systemd[1]: Starting prepare-critools.service... Oct 2 19:20:56.485210 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:20:56.500139 systemd[1]: Starting sshd-keygen.service... Oct 2 19:20:56.519940 systemd[1]: Starting systemd-logind.service... Oct 2 19:20:56.531647 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:20:56.532179 systemd[1]: Starting tcsd.service... Oct 2 19:20:56.667073 update_engine[1458]: I1002 19:20:56.614086 1458 main.cc:92] Flatcar Update Engine starting Oct 2 19:20:56.667073 update_engine[1458]: I1002 19:20:56.617655 1458 update_check_scheduler.cc:74] Next update check in 4m48s Oct 2 19:20:56.543505 systemd-logind[1456]: Watching system buttons on /dev/input/event3 (Power Button) Oct 2 19:20:56.667297 jq[1459]: true Oct 2 19:20:56.543514 systemd-logind[1456]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 19:20:56.543524 systemd-logind[1456]: Watching system buttons on /dev/input/event0 (HID 0557:2419) Oct 2 19:20:56.543712 systemd-logind[1456]: New seat seat0. Oct 2 19:20:56.552821 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:20:56.553223 systemd[1]: Starting update-engine.service... Oct 2 19:20:56.612127 systemd-networkd[1349]: enp1s0f1np1: Link UP Oct 2 19:20:56.612131 systemd-networkd[1349]: enp1s0f1np1: Gained carrier Oct 2 19:20:56.630002 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:20:56.658886 systemd[1]: Started dbus.service. Oct 2 19:20:56.661695 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:56.661807 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:56.661917 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:56.675434 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:20:56.675537 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:20:56.675716 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:20:56.675791 systemd[1]: Finished motdgen.service. Oct 2 19:20:56.683297 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:20:56.683393 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:20:56.688214 tar[1461]: ./ Oct 2 19:20:56.688214 tar[1461]: ./macvlan Oct 2 19:20:56.694270 jq[1465]: true Oct 2 19:20:56.695419 dbus-daemon[1426]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:20:56.696088 tar[1462]: crictl Oct 2 19:20:56.702130 systemd[1]: tcsd.service: Skipped due to 'exec-condition'. Oct 2 19:20:56.702255 systemd[1]: Condition check resulted in tcsd.service being skipped. Oct 2 19:20:56.702361 systemd[1]: Started update-engine.service. Oct 2 19:20:56.704859 env[1466]: time="2023-10-02T19:20:56.704835570Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:20:56.709036 tar[1461]: ./static Oct 2 19:20:56.712581 systemd[1]: Started systemd-logind.service. Oct 2 19:20:56.713157 env[1466]: time="2023-10-02T19:20:56.713140792Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:20:56.713871 env[1466]: time="2023-10-02T19:20:56.713860303Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:20:56.714526 env[1466]: time="2023-10-02T19:20:56.714507135Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:20:56.714526 env[1466]: time="2023-10-02T19:20:56.714522920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:20:56.714644 env[1466]: time="2023-10-02T19:20:56.714632799Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:20:56.714644 env[1466]: time="2023-10-02T19:20:56.714642723Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:20:56.714702 env[1466]: time="2023-10-02T19:20:56.714649675Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:20:56.714702 env[1466]: time="2023-10-02T19:20:56.714655481Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:20:56.714702 env[1466]: time="2023-10-02T19:20:56.714696816Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:20:56.716482 env[1466]: time="2023-10-02T19:20:56.716470082Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:20:56.716558 env[1466]: time="2023-10-02T19:20:56.716546259Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:20:56.716558 env[1466]: time="2023-10-02T19:20:56.716556957Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:20:56.716622 env[1466]: time="2023-10-02T19:20:56.716585452Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:20:56.716622 env[1466]: time="2023-10-02T19:20:56.716593504Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:20:56.722236 systemd[1]: Started locksmithd.service. Oct 2 19:20:56.728609 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:20:56.728701 systemd[1]: Reached target system-config.target. Oct 2 19:20:56.730383 env[1466]: time="2023-10-02T19:20:56.730368800Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:20:56.730413 env[1466]: time="2023-10-02T19:20:56.730388795Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:20:56.730413 env[1466]: time="2023-10-02T19:20:56.730397037Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:20:56.730447 env[1466]: time="2023-10-02T19:20:56.730420429Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730447 env[1466]: time="2023-10-02T19:20:56.730429177Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730447 env[1466]: time="2023-10-02T19:20:56.730436729Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730447 env[1466]: time="2023-10-02T19:20:56.730443440Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730526 env[1466]: time="2023-10-02T19:20:56.730450976Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730526 env[1466]: time="2023-10-02T19:20:56.730458124Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730526 env[1466]: time="2023-10-02T19:20:56.730465459Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730526 env[1466]: time="2023-10-02T19:20:56.730472636Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730526 env[1466]: time="2023-10-02T19:20:56.730479061Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:20:56.730596 env[1466]: time="2023-10-02T19:20:56.730548795Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:20:56.730617 env[1466]: time="2023-10-02T19:20:56.730596591Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:20:56.730737 env[1466]: time="2023-10-02T19:20:56.730728827Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:20:56.730758 env[1466]: time="2023-10-02T19:20:56.730743740Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730758 env[1466]: time="2023-10-02T19:20:56.730751229Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:20:56.730787 env[1466]: time="2023-10-02T19:20:56.730776774Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730805 env[1466]: time="2023-10-02T19:20:56.730792166Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730805 env[1466]: time="2023-10-02T19:20:56.730800106Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730838 env[1466]: time="2023-10-02T19:20:56.730807109Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730838 env[1466]: time="2023-10-02T19:20:56.730813838Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730838 env[1466]: time="2023-10-02T19:20:56.730820019Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730838 env[1466]: time="2023-10-02T19:20:56.730826246Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730838 env[1466]: time="2023-10-02T19:20:56.730832558Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730912 env[1466]: time="2023-10-02T19:20:56.730839315Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:20:56.730912 env[1466]: time="2023-10-02T19:20:56.730901920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730912 env[1466]: time="2023-10-02T19:20:56.730910688Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730959 env[1466]: time="2023-10-02T19:20:56.730917476Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.730959 env[1466]: time="2023-10-02T19:20:56.730923450Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:20:56.730959 env[1466]: time="2023-10-02T19:20:56.730934681Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:20:56.730959 env[1466]: time="2023-10-02T19:20:56.730940661Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:20:56.730959 env[1466]: time="2023-10-02T19:20:56.730950490Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:20:56.731044 env[1466]: time="2023-10-02T19:20:56.730973305Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:20:56.731068 bash[1489]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:20:56.731141 env[1466]: time="2023-10-02T19:20:56.731105964Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:20:56.731141 env[1466]: time="2023-10-02T19:20:56.731139469Z" level=info msg="Connect containerd service" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.731157134Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.731467781Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.731836412Z" level=info msg="Start subscribing containerd event" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.731906214Z" level=info msg="Start recovering state" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.731933779Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.731971634Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.731985172Z" level=info msg="Start event monitor" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.732008529Z" level=info msg="containerd successfully booted in 0.027522s" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.732024765Z" level=info msg="Start snapshots syncer" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.732037590Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:20:56.733291 env[1466]: time="2023-10-02T19:20:56.732045486Z" level=info msg="Start streaming server" Oct 2 19:20:56.733470 tar[1461]: ./vlan Oct 2 19:20:56.736627 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:20:56.736718 systemd[1]: Reached target user-config.target. Oct 2 19:20:56.746249 systemd[1]: Started containerd.service. Oct 2 19:20:56.752759 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:20:56.753271 tar[1461]: ./portmap Oct 2 19:20:56.765351 sshd_keygen[1455]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:20:56.772408 tar[1461]: ./host-local Oct 2 19:20:56.777764 systemd[1]: Finished sshd-keygen.service. Oct 2 19:20:56.786520 systemd[1]: Starting issuegen.service... Oct 2 19:20:56.789262 tar[1461]: ./vrf Oct 2 19:20:56.793475 locksmithd[1501]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:20:56.794732 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:20:56.794818 systemd[1]: Finished issuegen.service. Oct 2 19:20:56.803410 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:20:56.807537 tar[1461]: ./bridge Oct 2 19:20:56.812750 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:20:56.822391 systemd[1]: Started getty@tty1.service. Oct 2 19:20:56.829304 tar[1461]: ./tuning Oct 2 19:20:56.831310 systemd[1]: Started serial-getty@ttyS1.service. Oct 2 19:20:56.839625 systemd[1]: Reached target getty.target. Oct 2 19:20:56.846685 tar[1461]: ./firewall Oct 2 19:20:56.861805 systemd[1]: Finished prepare-critools.service. Oct 2 19:20:56.869190 tar[1461]: ./host-device Oct 2 19:20:56.888762 tar[1461]: ./sbr Oct 2 19:20:56.906668 tar[1461]: ./loopback Oct 2 19:20:56.923661 tar[1461]: ./dhcp Oct 2 19:20:56.964491 kernel: EXT4-fs (sda9): resized filesystem to 116605649 Oct 2 19:20:56.990042 extend-filesystems[1445]: Filesystem at /dev/sda9 is mounted on /; on-line resizing required Oct 2 19:20:56.990042 extend-filesystems[1445]: old_desc_blocks = 1, new_desc_blocks = 56 Oct 2 19:20:56.990042 extend-filesystems[1445]: The filesystem on /dev/sda9 is now 116605649 (4k) blocks long. Oct 2 19:20:57.029563 extend-filesystems[1428]: Resized filesystem in /dev/sda9 Oct 2 19:20:57.029563 extend-filesystems[1428]: Found sdb Oct 2 19:20:57.045525 tar[1461]: ./ptp Oct 2 19:20:57.045525 tar[1461]: ./ipvlan Oct 2 19:20:57.045525 tar[1461]: ./bandwidth Oct 2 19:20:56.990575 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:20:56.990665 systemd[1]: Finished extend-filesystems.service. Oct 2 19:20:57.063894 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:20:57.617630 systemd-networkd[1349]: bond0: Gained IPv6LL Oct 2 19:20:57.617894 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:57.809857 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:20:57.809960 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:21:00.102682 kernel: mlx5_core 0000:01:00.0: lag map port 1:1 port 2:2 shared_fdb:0 Oct 2 19:21:01.983922 login[1521]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 19:21:01.985146 login[1520]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:21:02.015626 systemd-logind[1456]: New session 1 of user core. Oct 2 19:21:02.019338 systemd[1]: Created slice user-500.slice. Oct 2 19:21:02.022696 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:21:02.033998 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:21:02.034777 systemd[1]: Starting user@500.service... Oct 2 19:21:02.036813 (systemd)[1529]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:02.109188 systemd[1529]: Queued start job for default target default.target. Oct 2 19:21:02.109418 systemd[1529]: Reached target paths.target. Oct 2 19:21:02.109430 systemd[1529]: Reached target sockets.target. Oct 2 19:21:02.109438 systemd[1529]: Reached target timers.target. Oct 2 19:21:02.109445 systemd[1529]: Reached target basic.target. Oct 2 19:21:02.109463 systemd[1529]: Reached target default.target. Oct 2 19:21:02.109477 systemd[1529]: Startup finished in 69ms. Oct 2 19:21:02.109525 systemd[1]: Started user@500.service. Oct 2 19:21:02.110111 systemd[1]: Started session-1.scope. Oct 2 19:21:02.610855 coreos-metadata[1420]: Oct 02 19:21:02.610 INFO Failed to fetch: error sending request for url (https://metadata.packet.net/metadata): error trying to connect: dns error: failed to lookup address information: Name or service not known Oct 2 19:21:02.611634 coreos-metadata[1423]: Oct 02 19:21:02.610 INFO Failed to fetch: error sending request for url (https://metadata.packet.net/metadata): error trying to connect: dns error: failed to lookup address information: Name or service not known Oct 2 19:21:02.989905 login[1521]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:21:02.992440 systemd-logind[1456]: New session 2 of user core. Oct 2 19:21:02.993107 systemd[1]: Started session-2.scope. Oct 2 19:21:03.610971 coreos-metadata[1420]: Oct 02 19:21:03.610 INFO Fetching https://metadata.packet.net/metadata: Attempt #2 Oct 2 19:21:03.611775 coreos-metadata[1423]: Oct 02 19:21:03.610 INFO Fetching https://metadata.packet.net/metadata: Attempt #2 Oct 2 19:21:04.681996 coreos-metadata[1423]: Oct 02 19:21:04.681 INFO Fetch successful Oct 2 19:21:04.682975 coreos-metadata[1420]: Oct 02 19:21:04.682 INFO Fetch successful Oct 2 19:21:04.706700 systemd[1]: Finished coreos-metadata.service. Oct 2 19:21:04.707500 unknown[1420]: wrote ssh authorized keys file for user: core Oct 2 19:21:04.707558 systemd[1]: Started packet-phone-home.service. Oct 2 19:21:04.717500 curl[1551]: % Total % Received % Xferd Average Speed Time Time Time Current Oct 2 19:21:04.717724 curl[1551]: Dload Upload Total Spent Left Speed Oct 2 19:21:04.720625 update-ssh-keys[1552]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:21:04.720777 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:21:04.720981 systemd[1]: Reached target multi-user.target. Oct 2 19:21:04.721643 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:21:04.725579 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:21:04.725662 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:21:04.725801 systemd[1]: Startup finished in 1.902s (kernel) + 18.675s (initrd) + 15.219s (userspace) = 35.797s. Oct 2 19:21:04.874062 curl[1551]: \u000d 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0\u000d 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 Oct 2 19:21:04.876478 systemd[1]: packet-phone-home.service: Deactivated successfully. Oct 2 19:21:04.964056 systemd[1]: Created slice system-sshd.slice. Oct 2 19:21:04.964707 systemd[1]: Started sshd@0-145.40.90.157:22-139.178.89.65:50868.service. Oct 2 19:21:05.013740 sshd[1555]: Accepted publickey for core from 139.178.89.65 port 50868 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:21:05.014788 sshd[1555]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:05.018114 systemd-logind[1456]: New session 3 of user core. Oct 2 19:21:05.018987 systemd[1]: Started session-3.scope. Oct 2 19:21:05.071747 systemd[1]: Started sshd@1-145.40.90.157:22-139.178.89.65:50874.service. Oct 2 19:21:05.099061 sshd[1560]: Accepted publickey for core from 139.178.89.65 port 50874 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:21:05.099817 sshd[1560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:05.102089 systemd-logind[1456]: New session 4 of user core. Oct 2 19:21:05.102717 systemd[1]: Started session-4.scope. Oct 2 19:21:05.155834 sshd[1560]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:05.157182 systemd[1]: sshd@1-145.40.90.157:22-139.178.89.65:50874.service: Deactivated successfully. Oct 2 19:21:05.157489 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:21:05.157899 systemd-logind[1456]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:21:05.158394 systemd[1]: Started sshd@2-145.40.90.157:22-139.178.89.65:50876.service. Oct 2 19:21:05.158810 systemd-logind[1456]: Removed session 4. Oct 2 19:21:05.187539 sshd[1566]: Accepted publickey for core from 139.178.89.65 port 50876 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:21:05.188433 sshd[1566]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:05.191519 systemd-logind[1456]: New session 5 of user core. Oct 2 19:21:05.192455 systemd[1]: Started session-5.scope. Oct 2 19:21:05.246197 sshd[1566]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:05.253367 systemd[1]: sshd@2-145.40.90.157:22-139.178.89.65:50876.service: Deactivated successfully. Oct 2 19:21:05.255048 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:21:05.256759 systemd-logind[1456]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:21:05.259868 systemd[1]: Started sshd@3-145.40.90.157:22-139.178.89.65:50890.service. Oct 2 19:21:05.262395 systemd-logind[1456]: Removed session 5. Oct 2 19:21:05.347058 sshd[1572]: Accepted publickey for core from 139.178.89.65 port 50890 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:21:05.348116 sshd[1572]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:05.351321 systemd-logind[1456]: New session 6 of user core. Oct 2 19:21:05.352193 systemd[1]: Started session-6.scope. Oct 2 19:21:05.415337 sshd[1572]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:05.421932 systemd[1]: sshd@3-145.40.90.157:22-139.178.89.65:50890.service: Deactivated successfully. Oct 2 19:21:05.423661 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:21:05.425451 systemd-logind[1456]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:21:05.428202 systemd[1]: Started sshd@4-145.40.90.157:22-139.178.89.65:52990.service. Oct 2 19:21:05.431132 systemd-logind[1456]: Removed session 6. Oct 2 19:21:05.459916 sshd[1578]: Accepted publickey for core from 139.178.89.65 port 52990 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:21:05.460600 sshd[1578]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:05.463009 systemd-logind[1456]: New session 7 of user core. Oct 2 19:21:05.463462 systemd[1]: Started session-7.scope. Oct 2 19:21:05.550168 sudo[1582]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:21:05.550796 sudo[1582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:21:05.574066 dbus-daemon[1426]: \xd0\u001d\u001f\xa5\xb4U: received setenforce notice (enforcing=1509185968) Oct 2 19:21:05.579191 sudo[1582]: pam_unix(sudo:session): session closed for user root Oct 2 19:21:05.585118 sshd[1578]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:05.592779 systemd[1]: sshd@4-145.40.90.157:22-139.178.89.65:52990.service: Deactivated successfully. Oct 2 19:21:05.594428 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:21:05.596222 systemd-logind[1456]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:21:05.599101 systemd[1]: Started sshd@5-145.40.90.157:22-139.178.89.65:53006.service. Oct 2 19:21:05.601714 systemd-logind[1456]: Removed session 7. Oct 2 19:21:05.678997 sshd[1586]: Accepted publickey for core from 139.178.89.65 port 53006 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:21:05.680782 sshd[1586]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:05.686263 systemd-logind[1456]: New session 8 of user core. Oct 2 19:21:05.687559 systemd[1]: Started session-8.scope. Oct 2 19:21:05.749904 sudo[1590]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:21:05.750008 sudo[1590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:21:05.751860 sudo[1590]: pam_unix(sudo:session): session closed for user root Oct 2 19:21:05.754141 sudo[1589]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:21:05.754248 sudo[1589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:21:05.759418 systemd[1]: Stopping audit-rules.service... Oct 2 19:21:05.759000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:21:05.760314 auditctl[1593]: No rules Oct 2 19:21:05.760473 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:21:05.760568 systemd[1]: Stopped audit-rules.service. Oct 2 19:21:05.761359 systemd[1]: Starting audit-rules.service... Oct 2 19:21:05.765633 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:21:05.765668 kernel: audit: type=1305 audit(1696274465.759:158): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:21:05.772025 augenrules[1610]: No rules Oct 2 19:21:05.772375 systemd[1]: Finished audit-rules.service. Oct 2 19:21:05.759000 audit[1593]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe45d668d0 a2=420 a3=0 items=0 ppid=1 pid=1593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:05.780721 sudo[1589]: pam_unix(sudo:session): session closed for user root Oct 2 19:21:05.781584 sshd[1586]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:05.783119 systemd[1]: sshd@5-145.40.90.157:22-139.178.89.65:53006.service: Deactivated successfully. Oct 2 19:21:05.783473 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:21:05.783946 systemd-logind[1456]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:21:05.784496 systemd[1]: Started sshd@6-145.40.90.157:22-139.178.89.65:53014.service. Oct 2 19:21:05.784993 systemd-logind[1456]: Removed session 8. Oct 2 19:21:05.812210 kernel: audit: type=1300 audit(1696274465.759:158): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe45d668d0 a2=420 a3=0 items=0 ppid=1 pid=1593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:05.812284 kernel: audit: type=1327 audit(1696274465.759:158): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:21:05.759000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:21:05.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.844328 kernel: audit: type=1131 audit(1696274465.760:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.844352 kernel: audit: type=1130 audit(1696274465.772:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.866621 sshd[1616]: Accepted publickey for core from 139.178.89.65 port 53014 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:21:05.866811 kernel: audit: type=1106 audit(1696274465.780:161): pid=1589 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.780000 audit[1589]: USER_END pid=1589 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.867943 sshd[1616]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:05.870276 systemd-logind[1456]: New session 9 of user core. Oct 2 19:21:05.870709 systemd[1]: Started session-9.scope. Oct 2 19:21:05.892789 kernel: audit: type=1104 audit(1696274465.780:162): pid=1589 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.780000 audit[1589]: CRED_DISP pid=1589 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.781000 audit[1586]: USER_END pid=1586 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.917439 sudo[1619]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:21:05.917597 sudo[1619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:21:05.948363 kernel: audit: type=1106 audit(1696274465.781:163): pid=1586 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.948389 kernel: audit: type=1104 audit(1696274465.781:164): pid=1586 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.781000 audit[1586]: CRED_DISP pid=1586 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.974176 kernel: audit: type=1131 audit(1696274465.782:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-145.40.90.157:22-139.178.89.65:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-145.40.90.157:22-139.178.89.65:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-145.40.90.157:22-139.178.89.65:53014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.866000 audit[1616]: USER_ACCT pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.867000 audit[1616]: CRED_ACQ pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.867000 audit[1616]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee134f4b0 a2=3 a3=0 items=0 ppid=1 pid=1616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:05.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:05.872000 audit[1616]: USER_START pid=1616 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.872000 audit[1618]: CRED_ACQ pid=1618 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:05.916000 audit[1619]: USER_ACCT pid=1619 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.916000 audit[1619]: CRED_REFR pid=1619 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.918000 audit[1619]: USER_START pid=1619 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:06.434154 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:21:06.438156 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:21:06.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:06.438419 systemd[1]: Reached target network-online.target. Oct 2 19:21:06.439110 systemd[1]: Starting docker.service... Oct 2 19:21:06.456475 env[1641]: time="2023-10-02T19:21:06.456414223Z" level=info msg="Starting up" Oct 2 19:21:06.457146 env[1641]: time="2023-10-02T19:21:06.457107278Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:21:06.457146 env[1641]: time="2023-10-02T19:21:06.457116207Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:21:06.457146 env[1641]: time="2023-10-02T19:21:06.457127893Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:21:06.457146 env[1641]: time="2023-10-02T19:21:06.457134233Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:21:06.458479 env[1641]: time="2023-10-02T19:21:06.458466190Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:21:06.458479 env[1641]: time="2023-10-02T19:21:06.458476094Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:21:06.458566 env[1641]: time="2023-10-02T19:21:06.458495243Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:21:06.458566 env[1641]: time="2023-10-02T19:21:06.458502055Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:21:06.574772 env[1641]: time="2023-10-02T19:21:06.574703522Z" level=info msg="Loading containers: start." Oct 2 19:21:06.605000 audit[1688]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.605000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc9c507720 a2=0 a3=7ffc9c50770c items=0 ppid=1641 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.605000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:21:06.607000 audit[1690]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.607000 audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fffe13ba680 a2=0 a3=7fffe13ba66c items=0 ppid=1641 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.607000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:21:06.608000 audit[1692]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.608000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcfd388900 a2=0 a3=7ffcfd3888ec items=0 ppid=1641 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.608000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:21:06.609000 audit[1694]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.609000 audit[1694]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc4bb36d30 a2=0 a3=7ffc4bb36d1c items=0 ppid=1641 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.609000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:21:06.611000 audit[1696]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.611000 audit[1696]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc2eafdd0 a2=0 a3=7ffcc2eafdbc items=0 ppid=1641 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.611000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:21:06.643000 audit[1701]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.643000 audit[1701]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe9ee94c00 a2=0 a3=7ffe9ee94bec items=0 ppid=1641 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.643000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:21:06.650000 audit[1703]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.650000 audit[1703]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe4f61d370 a2=0 a3=7ffe4f61d35c items=0 ppid=1641 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.650000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:21:06.654000 audit[1705]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.654000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff7568c870 a2=0 a3=7fff7568c85c items=0 ppid=1641 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.654000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:21:06.659000 audit[1707]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.659000 audit[1707]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffee5f45cf0 a2=0 a3=7ffee5f45cdc items=0 ppid=1641 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.659000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:06.672000 audit[1711]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.672000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe75967240 a2=0 a3=7ffe7596722c items=0 ppid=1641 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.672000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:06.674000 audit[1712]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.674000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffb27a0190 a2=0 a3=7fffb27a017c items=0 ppid=1641 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.674000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:06.698566 kernel: Initializing XFRM netlink socket Oct 2 19:21:06.744948 env[1641]: time="2023-10-02T19:21:06.744895956Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:21:06.745633 systemd-timesyncd[1412]: Network configuration changed, trying to establish connection. Oct 2 19:21:06.756000 audit[1720]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.756000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff14ebb580 a2=0 a3=7fff14ebb56c items=0 ppid=1641 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.756000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:21:06.774000 audit[1723]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.774000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffc5015a20 a2=0 a3=7fffc5015a0c items=0 ppid=1641 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.774000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:21:06.775000 audit[1726]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.775000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcedf53030 a2=0 a3=7ffcedf5301c items=0 ppid=1641 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.775000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:21:06.776000 audit[1728]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.776000 audit[1728]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe4d11b260 a2=0 a3=7ffe4d11b24c items=0 ppid=1641 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.776000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:21:06.777000 audit[1730]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.777000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff4b4ccd60 a2=0 a3=7fff4b4ccd4c items=0 ppid=1641 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.777000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:21:06.778000 audit[1732]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.778000 audit[1732]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffdf8f1f160 a2=0 a3=7ffdf8f1f14c items=0 ppid=1641 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.778000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:21:06.779000 audit[1734]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.779000 audit[1734]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc6ce38e70 a2=0 a3=7ffc6ce38e5c items=0 ppid=1641 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.779000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:21:06.784000 audit[1737]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.784000 audit[1737]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffcddb89a10 a2=0 a3=7ffcddb899fc items=0 ppid=1641 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.784000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:21:06.785000 audit[1739]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.785000 audit[1739]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff5316bcf0 a2=0 a3=7fff5316bcdc items=0 ppid=1641 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.785000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:21:06.787000 audit[1741]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.787000 audit[1741]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffe349445d0 a2=0 a3=7ffe349445bc items=0 ppid=1641 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.787000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:21:06.788000 audit[1743]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.788000 audit[1743]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffff54e7f90 a2=0 a3=7ffff54e7f7c items=0 ppid=1641 pid=1743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.788000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:21:06.788861 systemd-networkd[1349]: docker0: Link UP Oct 2 19:21:06.792000 audit[1747]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.792000 audit[1747]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd1cfbc7d0 a2=0 a3=7ffd1cfbc7bc items=0 ppid=1641 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.792000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:06.792000 audit[1748]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:06.792000 audit[1748]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffeb56cd730 a2=0 a3=7ffeb56cd71c items=0 ppid=1641 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:06.792000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:21:06.793300 env[1641]: time="2023-10-02T19:21:06.793287615Z" level=info msg="Loading containers: done." Oct 2 19:21:06.801177 env[1641]: time="2023-10-02T19:21:06.801153339Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:21:06.801281 env[1641]: time="2023-10-02T19:21:06.801268567Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:21:06.801339 env[1641]: time="2023-10-02T19:21:06.801328923Z" level=info msg="Daemon has completed initialization" Oct 2 19:21:06.809373 systemd[1]: Started docker.service. Oct 2 19:21:06.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:06.814391 env[1641]: time="2023-10-02T19:21:06.814334771Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:21:06.833857 systemd[1]: Reloading. Oct 2 19:21:06.887649 /usr/lib/systemd/system-generators/torcx-generator[1800]: time="2023-10-02T19:21:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:21:06.887675 /usr/lib/systemd/system-generators/torcx-generator[1800]: time="2023-10-02T19:21:06Z" level=info msg="torcx already run" Oct 2 19:21:06.943035 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:21:06.943044 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:21:06.957028 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit: BPF prog-id=31 op=LOAD Oct 2 19:21:07.000000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit: BPF prog-id=32 op=LOAD Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.000000 audit: BPF prog-id=33 op=LOAD Oct 2 19:21:07.000000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:21:07.000000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit: BPF prog-id=34 op=LOAD Oct 2 19:21:07.001000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit: BPF prog-id=35 op=LOAD Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.001000 audit: BPF prog-id=36 op=LOAD Oct 2 19:21:07.001000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:21:07.001000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit: BPF prog-id=37 op=LOAD Oct 2 19:21:07.002000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.002000 audit: BPF prog-id=38 op=LOAD Oct 2 19:21:07.002000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit: BPF prog-id=39 op=LOAD Oct 2 19:21:07.003000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit: BPF prog-id=40 op=LOAD Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.003000 audit: BPF prog-id=41 op=LOAD Oct 2 19:21:07.003000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:21:07.003000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit: BPF prog-id=42 op=LOAD Oct 2 19:21:07.004000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit: BPF prog-id=43 op=LOAD Oct 2 19:21:07.004000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit: BPF prog-id=44 op=LOAD Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:07.005000 audit: BPF prog-id=45 op=LOAD Oct 2 19:21:07.005000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:21:07.005000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:21:07.009321 systemd[1]: Started kubelet.service. Oct 2 19:21:07.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:07.032027 kubelet[1857]: E1002 19:21:07.031984 1857 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:21:07.033244 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:21:07.033311 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:21:07.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:07.240401 systemd-timesyncd[1412]: Contacted time server [2603:c020:6:b900:ed2f:b442:fee7:d9b9]:123 (2.flatcar.pool.ntp.org). Oct 2 19:21:07.240588 systemd-timesyncd[1412]: Initial clock synchronization to Mon 2023-10-02 19:21:07.574153 UTC. Oct 2 19:21:07.807883 env[1466]: time="2023-10-02T19:21:07.807802801Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\"" Oct 2 19:21:08.562942 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3295426055.mount: Deactivated successfully. Oct 2 19:21:09.800987 env[1466]: time="2023-10-02T19:21:09.800929410Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:09.802683 env[1466]: time="2023-10-02T19:21:09.802664710Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:09.803677 env[1466]: time="2023-10-02T19:21:09.803663807Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:09.804697 env[1466]: time="2023-10-02T19:21:09.804684173Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:bb3eff7d20d94d44ffea47066a4400a70ede58abd9de01c80400817a955397b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:09.805192 env[1466]: time="2023-10-02T19:21:09.805179051Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\" returns image reference \"sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f\"" Oct 2 19:21:09.812920 env[1466]: time="2023-10-02T19:21:09.812903066Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\"" Oct 2 19:21:11.338148 env[1466]: time="2023-10-02T19:21:11.338114196Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:11.338800 env[1466]: time="2023-10-02T19:21:11.338785862Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:11.340323 env[1466]: time="2023-10-02T19:21:11.340309304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:11.341360 env[1466]: time="2023-10-02T19:21:11.341346697Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:44d63bed8020f7610851a1a653ad7c6df83bd02ad128303de939a39997854ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:11.341823 env[1466]: time="2023-10-02T19:21:11.341793938Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\" returns image reference \"sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f\"" Oct 2 19:21:11.349600 env[1466]: time="2023-10-02T19:21:11.349578039Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\"" Oct 2 19:21:12.320721 env[1466]: time="2023-10-02T19:21:12.320690892Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.321376 env[1466]: time="2023-10-02T19:21:12.321363237Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.323203 env[1466]: time="2023-10-02T19:21:12.323177140Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.324376 env[1466]: time="2023-10-02T19:21:12.324362465Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:207b36120eca76bf8607682a3ee37e12b5156b921a9379d776b297ab01ca8198,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:12.324757 env[1466]: time="2023-10-02T19:21:12.324741876Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\" returns image reference \"sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a\"" Oct 2 19:21:12.331975 env[1466]: time="2023-10-02T19:21:12.331916874Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\"" Oct 2 19:21:13.246612 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2169467319.mount: Deactivated successfully. Oct 2 19:21:13.517040 env[1466]: time="2023-10-02T19:21:13.516938660Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:13.517724 env[1466]: time="2023-10-02T19:21:13.517711810Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:13.518433 env[1466]: time="2023-10-02T19:21:13.518419162Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:13.519437 env[1466]: time="2023-10-02T19:21:13.519423034Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4a23f328943342be6a3eeda75cc7a01d175bcf8b096611c97d2aa14c843cf326,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:13.519573 env[1466]: time="2023-10-02T19:21:13.519530695Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\" returns image reference \"sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2\"" Oct 2 19:21:13.525815 env[1466]: time="2023-10-02T19:21:13.525796224Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\"" Oct 2 19:21:14.068675 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2227170900.mount: Deactivated successfully. Oct 2 19:21:14.070272 env[1466]: time="2023-10-02T19:21:14.070237711Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:14.070898 env[1466]: time="2023-10-02T19:21:14.070887743Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:14.071618 env[1466]: time="2023-10-02T19:21:14.071607315Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:14.072559 env[1466]: time="2023-10-02T19:21:14.072517758Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:9001185023633d17a2f98ff69b6ff2615b8ea02a825adffa40422f51dfdcde9d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:14.072828 env[1466]: time="2023-10-02T19:21:14.072814684Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\" returns image reference \"sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517\"" Oct 2 19:21:14.078867 env[1466]: time="2023-10-02T19:21:14.078820772Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:21:14.740552 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1415674020.mount: Deactivated successfully. Oct 2 19:21:17.128419 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:21:17.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:17.128623 systemd[1]: Stopped kubelet.service. Oct 2 19:21:17.129490 systemd[1]: Started kubelet.service. Oct 2 19:21:17.134334 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:21:17.134374 kernel: audit: type=1130 audit(1696274477.127:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:17.152667 kubelet[1955]: E1002 19:21:17.152576 1955 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:21:17.155510 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:21:17.155628 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:21:17.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:17.214038 kernel: audit: type=1131 audit(1696274477.127:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:17.214100 kernel: audit: type=1130 audit(1696274477.128:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:17.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:17.271905 kernel: audit: type=1131 audit(1696274477.155:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:17.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:21:17.702428 env[1466]: time="2023-10-02T19:21:17.702373114Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.703025 env[1466]: time="2023-10-02T19:21:17.702966751Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.703924 env[1466]: time="2023-10-02T19:21:17.703879605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.704847 env[1466]: time="2023-10-02T19:21:17.704808181Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:17.706085 env[1466]: time="2023-10-02T19:21:17.706051433Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:21:17.712500 env[1466]: time="2023-10-02T19:21:17.712478257Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:21:18.249372 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount593339218.mount: Deactivated successfully. Oct 2 19:21:18.668651 env[1466]: time="2023-10-02T19:21:18.668591974Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:18.669207 env[1466]: time="2023-10-02T19:21:18.669160673Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:18.669905 env[1466]: time="2023-10-02T19:21:18.669861695Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:18.670560 env[1466]: time="2023-10-02T19:21:18.670524665Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:18.671256 env[1466]: time="2023-10-02T19:21:18.671218906Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:21:20.302501 systemd[1]: Stopped kubelet.service. Oct 2 19:21:20.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:20.311288 systemd[1]: Reloading. Oct 2 19:21:20.351800 /usr/lib/systemd/system-generators/torcx-generator[2101]: time="2023-10-02T19:21:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:21:20.351827 /usr/lib/systemd/system-generators/torcx-generator[2101]: time="2023-10-02T19:21:20Z" level=info msg="torcx already run" Oct 2 19:21:20.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:20.364591 kernel: audit: type=1130 audit(1696274480.301:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:20.364672 kernel: audit: type=1131 audit(1696274480.301:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:20.446811 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:21:20.446819 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:21:20.458958 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.630156 kernel: audit: type=1400 audit(1696274480.502:381): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.630199 kernel: audit: type=1400 audit(1696274480.502:382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.630218 kernel: audit: type=1400 audit(1696274480.502:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.694787 kernel: audit: type=1400 audit(1696274480.502:384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit: BPF prog-id=46 op=LOAD Oct 2 19:21:20.629000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit: BPF prog-id=47 op=LOAD Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit: BPF prog-id=48 op=LOAD Oct 2 19:21:20.759000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:21:20.759000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.759000 audit: BPF prog-id=49 op=LOAD Oct 2 19:21:20.759000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit: BPF prog-id=50 op=LOAD Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit: BPF prog-id=51 op=LOAD Oct 2 19:21:20.760000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:21:20.760000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.760000 audit: BPF prog-id=52 op=LOAD Oct 2 19:21:20.760000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.761000 audit: BPF prog-id=53 op=LOAD Oct 2 19:21:20.761000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit: BPF prog-id=54 op=LOAD Oct 2 19:21:20.762000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit: BPF prog-id=55 op=LOAD Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit: BPF prog-id=56 op=LOAD Oct 2 19:21:20.762000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:21:20.762000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit: BPF prog-id=57 op=LOAD Oct 2 19:21:20.762000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit: BPF prog-id=58 op=LOAD Oct 2 19:21:20.762000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit: BPF prog-id=59 op=LOAD Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.762000 audit: BPF prog-id=60 op=LOAD Oct 2 19:21:20.762000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:21:20.762000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:21:20.770532 systemd[1]: Started kubelet.service. Oct 2 19:21:20.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:20.792716 kubelet[2160]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:21:20.792716 kubelet[2160]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:21:20.792716 kubelet[2160]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:20.792716 kubelet[2160]: I1002 19:21:20.792706 2160 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:21:20.793473 kubelet[2160]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:21:20.793473 kubelet[2160]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:21:20.793473 kubelet[2160]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:20.960439 kubelet[2160]: I1002 19:21:20.960398 2160 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:21:20.960439 kubelet[2160]: I1002 19:21:20.960412 2160 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:21:20.960608 kubelet[2160]: I1002 19:21:20.960600 2160 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:21:20.962092 kubelet[2160]: I1002 19:21:20.962065 2160 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:21:20.962434 kubelet[2160]: E1002 19:21:20.962400 2160 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://145.40.90.157:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.985185 kubelet[2160]: I1002 19:21:20.985176 2160 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:21:20.985316 kubelet[2160]: I1002 19:21:20.985309 2160 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:21:20.985368 kubelet[2160]: I1002 19:21:20.985360 2160 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:21:20.985447 kubelet[2160]: I1002 19:21:20.985373 2160 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:21:20.985447 kubelet[2160]: I1002 19:21:20.985385 2160 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:21:20.985447 kubelet[2160]: I1002 19:21:20.985436 2160 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:20.987893 kubelet[2160]: I1002 19:21:20.987859 2160 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:21:20.987893 kubelet[2160]: I1002 19:21:20.987869 2160 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:21:20.987970 kubelet[2160]: I1002 19:21:20.987896 2160 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:21:20.987970 kubelet[2160]: I1002 19:21:20.987905 2160 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:21:20.988283 kubelet[2160]: I1002 19:21:20.988272 2160 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:21:20.988283 kubelet[2160]: W1002 19:21:20.988266 2160 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://145.40.90.157:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-a82eb4d27c&limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.988349 kubelet[2160]: E1002 19:21:20.988293 2160 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://145.40.90.157:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-a82eb4d27c&limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.988349 kubelet[2160]: W1002 19:21:20.988310 2160 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://145.40.90.157:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.988349 kubelet[2160]: E1002 19:21:20.988333 2160 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://145.40.90.157:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.988465 kubelet[2160]: W1002 19:21:20.988457 2160 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:21:20.988715 kubelet[2160]: I1002 19:21:20.988688 2160 server.go:1175] "Started kubelet" Oct 2 19:21:20.988751 kubelet[2160]: I1002 19:21:20.988740 2160 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:21:20.988933 kubelet[2160]: E1002 19:21:20.988922 2160 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:21:20.988933 kubelet[2160]: E1002 19:21:20.988934 2160 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:21:20.989031 kubelet[2160]: E1002 19:21:20.988972 2160 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-a82eb4d27c.178a60a738e3e94e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-a82eb4d27c", UID:"ci-3510.3.0-a-a82eb4d27c", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-a82eb4d27c"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 21, 20, 988678478, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 21, 20, 988678478, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://145.40.90.157:6443/api/v1/namespaces/default/events": dial tcp 145.40.90.157:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:21:20.988000 audit[2160]: AVC avc: denied { mac_admin } for pid=2160 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.988000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:20.988000 audit[2160]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001342780 a1=c0013445a0 a2=c001342750 a3=25 items=0 ppid=1 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.988000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:20.988000 audit[2160]: AVC avc: denied { mac_admin } for pid=2160 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:20.988000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:20.988000 audit[2160]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00134c2a0 a1=c0013445b8 a2=c001342810 a3=25 items=0 ppid=1 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.988000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:20.989620 kubelet[2160]: I1002 19:21:20.989261 2160 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:21:20.989620 kubelet[2160]: I1002 19:21:20.989285 2160 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:21:20.989620 kubelet[2160]: I1002 19:21:20.989308 2160 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:21:20.989620 kubelet[2160]: I1002 19:21:20.989341 2160 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:21:20.989620 kubelet[2160]: I1002 19:21:20.989371 2160 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:21:20.989620 kubelet[2160]: I1002 19:21:20.989409 2160 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:21:20.989620 kubelet[2160]: E1002 19:21:20.989520 2160 controller.go:144] failed to ensure lease exists, will retry in 200ms, error: Get "https://145.40.90.157:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-a82eb4d27c?timeout=10s": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.989620 kubelet[2160]: W1002 19:21:20.989571 2160 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://145.40.90.157:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.989620 kubelet[2160]: E1002 19:21:20.989594 2160 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://145.40.90.157:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:20.989863 kubelet[2160]: E1002 19:21:20.989712 2160 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:20.990000 audit[2186]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:20.990000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffec2b6a860 a2=0 a3=7ffec2b6a84c items=0 ppid=2160 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.990000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:21:20.991000 audit[2187]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:20.991000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8e2f00e0 a2=0 a3=7ffc8e2f00cc items=0 ppid=2160 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:21:20.992000 audit[2189]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:20.992000 audit[2189]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe51b67900 a2=0 a3=7ffe51b678ec items=0 ppid=2160 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.992000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:21:20.993000 audit[2191]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:20.993000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc3a45a930 a2=0 a3=7ffc3a45a91c items=0 ppid=2160 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.993000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:21:20.996000 audit[2194]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:20.996000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffce84d0c70 a2=0 a3=7ffce84d0c5c items=0 ppid=2160 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.996000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:21:20.996000 audit[2195]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:20.996000 audit[2195]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe05d3bed0 a2=0 a3=7ffe05d3bebc items=0 ppid=2160 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.996000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:21:20.999000 audit[2199]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:20.999000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffce6c9ccc0 a2=0 a3=7ffce6c9ccac items=0 ppid=2160 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:20.999000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:21:21.001000 audit[2202]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.001000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff8f780870 a2=0 a3=7fff8f78085c items=0 ppid=2160 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.001000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:21:21.001000 audit[2203]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.001000 audit[2203]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff4de1e000 a2=0 a3=7fff4de1dfec items=0 ppid=2160 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.001000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:21:21.002000 audit[2204]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.002000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb9564ea0 a2=0 a3=7ffdb9564e8c items=0 ppid=2160 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.002000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:21:21.003000 audit[2206]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.003000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe0b4d42b0 a2=0 a3=7ffe0b4d429c items=0 ppid=2160 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.003000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:21:21.004000 audit[2208]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.004000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe85a69f40 a2=0 a3=7ffe85a69f2c items=0 ppid=2160 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.004000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:21:21.005000 audit[2210]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.005000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe859a1fb0 a2=0 a3=7ffe859a1f9c items=0 ppid=2160 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:21:21.006000 audit[2212]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.006000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffc928613b0 a2=0 a3=7ffc9286139c items=0 ppid=2160 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.006000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:21:21.008000 audit[2214]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.008000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffd1c287d00 a2=0 a3=7ffd1c287cec items=0 ppid=2160 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.008000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:21:21.008868 kubelet[2160]: I1002 19:21:21.008850 2160 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:21:21.008000 audit[2215]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.008000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffeb09bdde0 a2=0 a3=7ffeb09bddcc items=0 ppid=2160 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.008000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:21:21.008000 audit[2216]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.008000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd89643270 a2=0 a3=7ffd8964325c items=0 ppid=2160 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.008000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:21:21.008000 audit[2217]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.008000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd094294b0 a2=0 a3=7ffd0942949c items=0 ppid=2160 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.008000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:21:21.008000 audit[2218]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.008000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5f4b6090 a2=0 a3=7ffc5f4b607c items=0 ppid=2160 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.008000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:21:21.008000 audit[2220]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:21.008000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc035440f0 a2=0 a3=7ffc035440dc items=0 ppid=2160 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.008000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:21:21.009000 audit[2221]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.009000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcb7e2fd30 a2=0 a3=7ffcb7e2fd1c items=0 ppid=2160 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.009000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:21:21.009000 audit[2222]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.009000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7fffb24304b0 a2=0 a3=7fffb243049c items=0 ppid=2160 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.009000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:21:21.010000 audit[2224]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.010000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd7c0ee7c0 a2=0 a3=7ffd7c0ee7ac items=0 ppid=2160 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.010000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:21:21.011000 audit[2225]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.011000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd356e4420 a2=0 a3=7ffd356e440c items=0 ppid=2160 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.011000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:21:21.011000 audit[2226]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.011000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0a300b60 a2=0 a3=7fff0a300b4c items=0 ppid=2160 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.011000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:21:21.012000 audit[2228]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.012000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd82428f00 a2=0 a3=7ffd82428eec items=0 ppid=2160 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.012000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:21:21.013000 audit[2230]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.013000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffef4f78990 a2=0 a3=7ffef4f7897c items=0 ppid=2160 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.013000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:21:21.014000 audit[2232]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.014000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffec37d2090 a2=0 a3=7ffec37d207c items=0 ppid=2160 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.014000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:21:21.016000 audit[2234]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.016000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffe897b6710 a2=0 a3=7ffe897b66fc items=0 ppid=2160 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.016000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:21:21.017000 audit[2236]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.017000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffe3a49a440 a2=0 a3=7ffe3a49a42c items=0 ppid=2160 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.017000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:21:21.019798 kubelet[2160]: I1002 19:21:21.019739 2160 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:21:21.019798 kubelet[2160]: I1002 19:21:21.019752 2160 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:21:21.019798 kubelet[2160]: I1002 19:21:21.019762 2160 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:21:21.019798 kubelet[2160]: E1002 19:21:21.019792 2160 kubelet.go:2034] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:21:21.020075 kubelet[2160]: W1002 19:21:21.020048 2160 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://145.40.90.157:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:21.020121 kubelet[2160]: E1002 19:21:21.020079 2160 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://145.40.90.157:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:21.018000 audit[2237]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.018000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff1164cdb0 a2=0 a3=7fff1164cd9c items=0 ppid=2160 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.018000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:21:21.019000 audit[2238]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.019000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca2d64660 a2=0 a3=7ffca2d6464c items=0 ppid=2160 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:21:21.019000 audit[2239]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:21.019000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc1ea1ac30 a2=0 a3=7ffc1ea1ac1c items=0 ppid=2160 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:21:21.045960 kubelet[2160]: I1002 19:21:21.045911 2160 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:21:21.045960 kubelet[2160]: I1002 19:21:21.045928 2160 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:21:21.045960 kubelet[2160]: I1002 19:21:21.045941 2160 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:21.046926 kubelet[2160]: I1002 19:21:21.046888 2160 policy_none.go:49] "None policy: Start" Oct 2 19:21:21.047296 kubelet[2160]: I1002 19:21:21.047257 2160 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:21:21.047296 kubelet[2160]: I1002 19:21:21.047274 2160 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:21:21.050814 systemd[1]: Created slice kubepods.slice. Oct 2 19:21:21.054989 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:21:21.058386 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:21:21.071734 kubelet[2160]: I1002 19:21:21.071692 2160 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:21:21.070000 audit[2160]: AVC avc: denied { mac_admin } for pid=2160 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:21.070000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:21.070000 audit[2160]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dc2ed0 a1=c000d60900 a2=c000dc2ea0 a3=25 items=0 ppid=1 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:21.070000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:21.072600 kubelet[2160]: I1002 19:21:21.071803 2160 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:21:21.072600 kubelet[2160]: I1002 19:21:21.072105 2160 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:21:21.072954 kubelet[2160]: E1002 19:21:21.072892 2160 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.089729 kubelet[2160]: E1002 19:21:21.089682 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.092600 kubelet[2160]: I1002 19:21:21.092567 2160 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.093238 kubelet[2160]: E1002 19:21:21.093195 2160 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://145.40.90.157:6443/api/v1/nodes\": dial tcp 145.40.90.157:6443: connect: connection refused" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.120683 kubelet[2160]: I1002 19:21:21.120580 2160 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:21.124062 kubelet[2160]: I1002 19:21:21.124013 2160 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:21.127295 kubelet[2160]: I1002 19:21:21.127250 2160 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:21.128372 kubelet[2160]: I1002 19:21:21.128306 2160 status_manager.go:667] "Failed to get status for pod" podUID=bd3d313a9096d366ab17b88ac9479833 pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" err="Get \"https://145.40.90.157:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-a82eb4d27c\": dial tcp 145.40.90.157:6443: connect: connection refused" Oct 2 19:21:21.131081 kubelet[2160]: I1002 19:21:21.131034 2160 status_manager.go:667] "Failed to get status for pod" podUID=fc1cdfced4ee08e6c7602791e6fb8b42 pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" err="Get \"https://145.40.90.157:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\": dial tcp 145.40.90.157:6443: connect: connection refused" Oct 2 19:21:21.134201 kubelet[2160]: I1002 19:21:21.134133 2160 status_manager.go:667] "Failed to get status for pod" podUID=864ebc9a73e4006e95a1b52d7498a5a6 pod="kube-system/kube-scheduler-ci-3510.3.0-a-a82eb4d27c" err="Get \"https://145.40.90.157:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-a82eb4d27c\": dial tcp 145.40.90.157:6443: connect: connection refused" Oct 2 19:21:21.139893 systemd[1]: Created slice kubepods-burstable-podbd3d313a9096d366ab17b88ac9479833.slice. Oct 2 19:21:21.167326 systemd[1]: Created slice kubepods-burstable-podfc1cdfced4ee08e6c7602791e6fb8b42.slice. Oct 2 19:21:21.176038 systemd[1]: Created slice kubepods-burstable-pod864ebc9a73e4006e95a1b52d7498a5a6.slice. Oct 2 19:21:21.190437 kubelet[2160]: E1002 19:21:21.190361 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.191234 kubelet[2160]: E1002 19:21:21.191132 2160 controller.go:144] failed to ensure lease exists, will retry in 400ms, error: Get "https://145.40.90.157:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-a82eb4d27c?timeout=10s": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:21.290970 kubelet[2160]: E1002 19:21:21.290734 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.290970 kubelet[2160]: I1002 19:21:21.290966 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291317 kubelet[2160]: I1002 19:21:21.291044 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/864ebc9a73e4006e95a1b52d7498a5a6-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-a82eb4d27c\" (UID: \"864ebc9a73e4006e95a1b52d7498a5a6\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291317 kubelet[2160]: I1002 19:21:21.291172 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/bd3d313a9096d366ab17b88ac9479833-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" (UID: \"bd3d313a9096d366ab17b88ac9479833\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291317 kubelet[2160]: I1002 19:21:21.291242 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/bd3d313a9096d366ab17b88ac9479833-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" (UID: \"bd3d313a9096d366ab17b88ac9479833\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291658 kubelet[2160]: I1002 19:21:21.291351 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291658 kubelet[2160]: I1002 19:21:21.291429 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291658 kubelet[2160]: I1002 19:21:21.291594 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/bd3d313a9096d366ab17b88ac9479833-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" (UID: \"bd3d313a9096d366ab17b88ac9479833\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291951 kubelet[2160]: I1002 19:21:21.291691 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.291951 kubelet[2160]: I1002 19:21:21.291840 2160 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.297633 kubelet[2160]: I1002 19:21:21.297547 2160 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.298241 kubelet[2160]: E1002 19:21:21.298171 2160 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://145.40.90.157:6443/api/v1/nodes\": dial tcp 145.40.90.157:6443: connect: connection refused" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.391525 kubelet[2160]: E1002 19:21:21.391406 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.464117 env[1466]: time="2023-10-02T19:21:21.463985325Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-a82eb4d27c,Uid:bd3d313a9096d366ab17b88ac9479833,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:21.473101 env[1466]: time="2023-10-02T19:21:21.472980365Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-a82eb4d27c,Uid:fc1cdfced4ee08e6c7602791e6fb8b42,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:21.481144 env[1466]: time="2023-10-02T19:21:21.481066882Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-a82eb4d27c,Uid:864ebc9a73e4006e95a1b52d7498a5a6,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:21.491784 kubelet[2160]: E1002 19:21:21.491699 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.592157 kubelet[2160]: E1002 19:21:21.591951 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.592624 kubelet[2160]: E1002 19:21:21.592522 2160 controller.go:144] failed to ensure lease exists, will retry in 800ms, error: Get "https://145.40.90.157:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-a82eb4d27c?timeout=10s": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:21.692746 kubelet[2160]: E1002 19:21:21.692639 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.702411 kubelet[2160]: I1002 19:21:21.702337 2160 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.703006 kubelet[2160]: E1002 19:21:21.702925 2160 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://145.40.90.157:6443/api/v1/nodes\": dial tcp 145.40.90.157:6443: connect: connection refused" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:21.793598 kubelet[2160]: E1002 19:21:21.793530 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.796662 kubelet[2160]: W1002 19:21:21.796525 2160 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://145.40.90.157:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-a82eb4d27c&limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:21.796662 kubelet[2160]: E1002 19:21:21.796644 2160 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://145.40.90.157:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-a82eb4d27c&limit=500&resourceVersion=0": dial tcp 145.40.90.157:6443: connect: connection refused Oct 2 19:21:21.894226 kubelet[2160]: E1002 19:21:21.894115 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.980057 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2159341283.mount: Deactivated successfully. Oct 2 19:21:21.981442 env[1466]: time="2023-10-02T19:21:21.981397319Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.982468 env[1466]: time="2023-10-02T19:21:21.982425110Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.982971 env[1466]: time="2023-10-02T19:21:21.982931723Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.983420 env[1466]: time="2023-10-02T19:21:21.983380154Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.985111 env[1466]: time="2023-10-02T19:21:21.985074415Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.986609 env[1466]: time="2023-10-02T19:21:21.986568073Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.987874 env[1466]: time="2023-10-02T19:21:21.987835223Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.989686 env[1466]: time="2023-10-02T19:21:21.989615173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.990665 env[1466]: time="2023-10-02T19:21:21.990627230Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.991059 env[1466]: time="2023-10-02T19:21:21.991018030Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.991481 env[1466]: time="2023-10-02T19:21:21.991445033Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.991936 env[1466]: time="2023-10-02T19:21:21.991895563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:21.994876 kubelet[2160]: E1002 19:21:21.994812 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:21.997371 env[1466]: time="2023-10-02T19:21:21.997331818Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:21.997371 env[1466]: time="2023-10-02T19:21:21.997364655Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:21.997511 env[1466]: time="2023-10-02T19:21:21.997376580Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:21.997511 env[1466]: time="2023-10-02T19:21:21.997466401Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6f032e2982916dfb860b6ceff29b14a14b496c4e55480eab70765bc50417d411 pid=2252 runtime=io.containerd.runc.v2 Oct 2 19:21:21.997993 env[1466]: time="2023-10-02T19:21:21.997961855Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:21.997993 env[1466]: time="2023-10-02T19:21:21.997988013Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:21.998051 env[1466]: time="2023-10-02T19:21:21.997994546Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:21.998085 env[1466]: time="2023-10-02T19:21:21.998065535Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/31ca41d296a0a71aa505de00c3eb22b3604dd8b06792e631e6b4639b76aabb77 pid=2263 runtime=io.containerd.runc.v2 Oct 2 19:21:21.998777 env[1466]: time="2023-10-02T19:21:21.998749422Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:21.998777 env[1466]: time="2023-10-02T19:21:21.998767859Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:21.998836 env[1466]: time="2023-10-02T19:21:21.998778973Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:21.998860 env[1466]: time="2023-10-02T19:21:21.998842285Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d5f47e63178f32f7c1f249cefab11ab5c53e90133e011230f9fcf660aede713b pid=2274 runtime=io.containerd.runc.v2 Oct 2 19:21:22.006485 systemd[1]: Started cri-containerd-31ca41d296a0a71aa505de00c3eb22b3604dd8b06792e631e6b4639b76aabb77.scope. Oct 2 19:21:22.007592 systemd[1]: Started cri-containerd-d5f47e63178f32f7c1f249cefab11ab5c53e90133e011230f9fcf660aede713b.scope. Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.010000 audit: BPF prog-id=61 op=LOAD Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2274 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663437653633313738663332663763316632343963656661623131 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2274 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663437653633313738663332663763316632343963656661623131 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit: BPF prog-id=62 op=LOAD Oct 2 19:21:22.011000 audit[2295]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000096a60 items=0 ppid=2274 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663437653633313738663332663763316632343963656661623131 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit: BPF prog-id=63 op=LOAD Oct 2 19:21:22.011000 audit[2295]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000096aa8 items=0 ppid=2274 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663437653633313738663332663763316632343963656661623131 Oct 2 19:21:22.011000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:21:22.011000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit: BPF prog-id=64 op=LOAD Oct 2 19:21:22.011000 audit[2295]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000096eb8 items=0 ppid=2274 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663437653633313738663332663763316632343963656661623131 Oct 2 19:21:22.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit: BPF prog-id=65 op=LOAD Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2263 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331636134316432393661306137316161353035646530306333656232 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=2263 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331636134316432393661306137316161353035646530306333656232 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit: BPF prog-id=66 op=LOAD Oct 2 19:21:22.011000 audit[2289]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c00009eba0 items=0 ppid=2263 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331636134316432393661306137316161353035646530306333656232 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit: BPF prog-id=67 op=LOAD Oct 2 19:21:22.011000 audit[2289]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c00009ebe8 items=0 ppid=2263 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331636134316432393661306137316161353035646530306333656232 Oct 2 19:21:22.011000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:21:22.011000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.011000 audit: BPF prog-id=68 op=LOAD Oct 2 19:21:22.011000 audit[2289]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c00009eff8 items=0 ppid=2263 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331636134316432393661306137316161353035646530306333656232 Oct 2 19:21:22.017402 systemd[1]: Started cri-containerd-6f032e2982916dfb860b6ceff29b14a14b496c4e55480eab70765bc50417d411.scope. Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.020000 audit: BPF prog-id=69 op=LOAD Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2252 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666303332653239383239313664666238363062366365666632396231 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2252 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666303332653239383239313664666238363062366365666632396231 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit: BPF prog-id=70 op=LOAD Oct 2 19:21:22.021000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000394430 items=0 ppid=2252 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666303332653239383239313664666238363062366365666632396231 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit: BPF prog-id=71 op=LOAD Oct 2 19:21:22.021000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000394478 items=0 ppid=2252 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666303332653239383239313664666238363062366365666632396231 Oct 2 19:21:22.021000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:21:22.021000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.021000 audit: BPF prog-id=72 op=LOAD Oct 2 19:21:22.021000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000394888 items=0 ppid=2252 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666303332653239383239313664666238363062366365666632396231 Oct 2 19:21:22.042121 env[1466]: time="2023-10-02T19:21:22.042098560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-a82eb4d27c,Uid:864ebc9a73e4006e95a1b52d7498a5a6,Namespace:kube-system,Attempt:0,} returns sandbox id \"d5f47e63178f32f7c1f249cefab11ab5c53e90133e011230f9fcf660aede713b\"" Oct 2 19:21:22.042229 env[1466]: time="2023-10-02T19:21:22.042093247Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-a82eb4d27c,Uid:bd3d313a9096d366ab17b88ac9479833,Namespace:kube-system,Attempt:0,} returns sandbox id \"31ca41d296a0a71aa505de00c3eb22b3604dd8b06792e631e6b4639b76aabb77\"" Oct 2 19:21:22.043634 env[1466]: time="2023-10-02T19:21:22.043620510Z" level=info msg="CreateContainer within sandbox \"d5f47e63178f32f7c1f249cefab11ab5c53e90133e011230f9fcf660aede713b\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:21:22.043715 env[1466]: time="2023-10-02T19:21:22.043700187Z" level=info msg="CreateContainer within sandbox \"31ca41d296a0a71aa505de00c3eb22b3604dd8b06792e631e6b4639b76aabb77\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:21:22.049239 env[1466]: time="2023-10-02T19:21:22.049220535Z" level=info msg="CreateContainer within sandbox \"d5f47e63178f32f7c1f249cefab11ab5c53e90133e011230f9fcf660aede713b\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"4f727918f26bcb14171f9b4b3993f425cecbaea679dacae663331ea126db688f\"" Oct 2 19:21:22.049486 env[1466]: time="2023-10-02T19:21:22.049475072Z" level=info msg="StartContainer for \"4f727918f26bcb14171f9b4b3993f425cecbaea679dacae663331ea126db688f\"" Oct 2 19:21:22.050032 env[1466]: time="2023-10-02T19:21:22.050018473Z" level=info msg="CreateContainer within sandbox \"31ca41d296a0a71aa505de00c3eb22b3604dd8b06792e631e6b4639b76aabb77\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"84ec31ad43bc77bba36fa6cbe168a08fb03e3e8beea2425c50bf889de219900e\"" Oct 2 19:21:22.050186 env[1466]: time="2023-10-02T19:21:22.050176083Z" level=info msg="StartContainer for \"84ec31ad43bc77bba36fa6cbe168a08fb03e3e8beea2425c50bf889de219900e\"" Oct 2 19:21:22.053046 env[1466]: time="2023-10-02T19:21:22.052989959Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-a82eb4d27c,Uid:fc1cdfced4ee08e6c7602791e6fb8b42,Namespace:kube-system,Attempt:0,} returns sandbox id \"6f032e2982916dfb860b6ceff29b14a14b496c4e55480eab70765bc50417d411\"" Oct 2 19:21:22.056379 env[1466]: time="2023-10-02T19:21:22.056354515Z" level=info msg="CreateContainer within sandbox \"6f032e2982916dfb860b6ceff29b14a14b496c4e55480eab70765bc50417d411\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:21:22.061487 env[1466]: time="2023-10-02T19:21:22.061467096Z" level=info msg="CreateContainer within sandbox \"6f032e2982916dfb860b6ceff29b14a14b496c4e55480eab70765bc50417d411\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"9937e90f091efaa7543e440895c904318b7308f3502935cd66e39cdbfedd1169\"" Oct 2 19:21:22.061738 env[1466]: time="2023-10-02T19:21:22.061724215Z" level=info msg="StartContainer for \"9937e90f091efaa7543e440895c904318b7308f3502935cd66e39cdbfedd1169\"" Oct 2 19:21:22.069963 systemd[1]: Started cri-containerd-9937e90f091efaa7543e440895c904318b7308f3502935cd66e39cdbfedd1169.scope. Oct 2 19:21:22.073204 systemd[1]: Started cri-containerd-4f727918f26bcb14171f9b4b3993f425cecbaea679dacae663331ea126db688f.scope. Oct 2 19:21:22.073792 systemd[1]: Started cri-containerd-84ec31ad43bc77bba36fa6cbe168a08fb03e3e8beea2425c50bf889de219900e.scope. Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit: BPF prog-id=73 op=LOAD Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333765393066303931656661613735343365343430383935633930 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=8 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333765393066303931656661613735343365343430383935633930 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit: BPF prog-id=74 op=LOAD Oct 2 19:21:22.079000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c00028b6d0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333765393066303931656661613735343365343430383935633930 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit: BPF prog-id=75 op=LOAD Oct 2 19:21:22.079000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c00028b718 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333765393066303931656661613735343365343430383935633930 Oct 2 19:21:22.079000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:21:22.079000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.079000 audit: BPF prog-id=76 op=LOAD Oct 2 19:21:22.079000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c00028bb28 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333765393066303931656661613735343365343430383935633930 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit: BPF prog-id=77 op=LOAD Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2274 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373237393138663236626362313431373166396234623339393366 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2274 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373237393138663236626362313431373166396234623339393366 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit: BPF prog-id=78 op=LOAD Oct 2 19:21:22.080000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003e60a0 items=0 ppid=2274 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373237393138663236626362313431373166396234623339393366 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit: BPF prog-id=79 op=LOAD Oct 2 19:21:22.080000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003e60e8 items=0 ppid=2274 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373237393138663236626362313431373166396234623339393366 Oct 2 19:21:22.080000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:21:22.080000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit: BPF prog-id=80 op=LOAD Oct 2 19:21:22.080000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e64f8 items=0 ppid=2274 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373237393138663236626362313431373166396234623339393366 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.080000 audit: BPF prog-id=81 op=LOAD Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2263 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834656333316164343362633737626261333666613663626531363861 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2263 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834656333316164343362633737626261333666613663626531363861 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit: BPF prog-id=82 op=LOAD Oct 2 19:21:22.081000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003ea0a0 items=0 ppid=2263 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834656333316164343362633737626261333666613663626531363861 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit: BPF prog-id=83 op=LOAD Oct 2 19:21:22.081000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003ea0e8 items=0 ppid=2263 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834656333316164343362633737626261333666613663626531363861 Oct 2 19:21:22.081000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:21:22.081000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:22.081000 audit: BPF prog-id=84 op=LOAD Oct 2 19:21:22.081000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003ea4f8 items=0 ppid=2263 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:22.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834656333316164343362633737626261333666613663626531363861 Oct 2 19:21:22.095339 kubelet[2160]: E1002 19:21:22.095303 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.099028 env[1466]: time="2023-10-02T19:21:22.098986261Z" level=info msg="StartContainer for \"4f727918f26bcb14171f9b4b3993f425cecbaea679dacae663331ea126db688f\" returns successfully" Oct 2 19:21:22.099172 env[1466]: time="2023-10-02T19:21:22.099096246Z" level=info msg="StartContainer for \"84ec31ad43bc77bba36fa6cbe168a08fb03e3e8beea2425c50bf889de219900e\" returns successfully" Oct 2 19:21:22.111985 env[1466]: time="2023-10-02T19:21:22.111949786Z" level=info msg="StartContainer for \"9937e90f091efaa7543e440895c904318b7308f3502935cd66e39cdbfedd1169\" returns successfully" Oct 2 19:21:22.196172 kubelet[2160]: E1002 19:21:22.196088 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.296757 kubelet[2160]: E1002 19:21:22.296741 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.397038 kubelet[2160]: E1002 19:21:22.397024 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.464000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:22.493756 kernel: kauditd_printk_skb: 622 callbacks suppressed Oct 2 19:21:22.493812 kernel: audit: type=1400 audit(1696274482.464:698): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:22.497926 kubelet[2160]: E1002 19:21:22.497913 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.504359 kubelet[2160]: I1002 19:21:22.504343 2160 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:22.464000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0008f6000 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:22.598197 kubelet[2160]: E1002 19:21:22.598169 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.698936 kubelet[2160]: E1002 19:21:22.698910 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.705998 kernel: audit: type=1300 audit(1696274482.464:698): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0008f6000 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:22.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:22.799671 kernel: audit: type=1327 audit(1696274482.464:698): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:22.799699 kernel: audit: type=1400 audit(1696274482.464:699): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:22.464000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:22.799778 kubelet[2160]: E1002 19:21:22.799623 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:22.889936 kernel: audit: type=1300 audit(1696274482.464:699): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0008021c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:22.464000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0008021c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:22.900146 kubelet[2160]: E1002 19:21:22.900099 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.000332 kubelet[2160]: E1002 19:21:23.000296 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.010568 kernel: audit: type=1327 audit(1696274482.464:699): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:22.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:23.101422 kubelet[2160]: E1002 19:21:23.101352 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.202012 kubelet[2160]: E1002 19:21:23.201950 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.303102 kubelet[2160]: E1002 19:21:23.303044 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.403811 kubelet[2160]: E1002 19:21:23.403763 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.504455 kubelet[2160]: E1002 19:21:23.504410 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.605528 kubelet[2160]: E1002 19:21:23.605487 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.706655 kubelet[2160]: E1002 19:21:23.706539 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.807432 kubelet[2160]: E1002 19:21:23.807384 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.908281 kubelet[2160]: E1002 19:21:23.908222 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.910000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:23.989736 kubelet[2160]: I1002 19:21:23.989680 2160 apiserver.go:52] "Watching apiserver" Oct 2 19:21:23.910000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:24.005236 kubelet[2160]: E1002 19:21:24.005226 2160 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-a82eb4d27c\" not found" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:24.008559 kubelet[2160]: E1002 19:21:24.008550 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:24.096116 kernel: audit: type=1400 audit(1696274483.910:701): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:24.096170 kernel: audit: type=1400 audit(1696274483.910:700): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:24.096200 kernel: audit: type=1300 audit(1696274483.910:701): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0009d4080 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:23.910000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0009d4080 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:24.109366 kubelet[2160]: E1002 19:21:24.109354 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:24.195927 kernel: audit: type=1300 audit(1696274483.910:700): arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c009d70000 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:23.910000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c009d70000 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:24.210167 kubelet[2160]: E1002 19:21:24.210146 2160 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-a82eb4d27c\" not found" Oct 2 19:21:23.910000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:21:23.910000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:21:23.911000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:23.911000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c009e40090 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:23.911000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:21:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00a07c000 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:21:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c009bf69c0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:21:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0018220c0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:21:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:21:24.305825 kubelet[2160]: I1002 19:21:24.305812 2160 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:24.411130 kubelet[2160]: I1002 19:21:24.411065 2160 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:21:26.073156 kubelet[2160]: E1002 19:21:26.073056 2160 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:26.878679 systemd[1]: Reloading. Oct 2 19:21:26.930692 /usr/lib/systemd/system-generators/torcx-generator[2536]: time="2023-10-02T19:21:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:21:26.930709 /usr/lib/systemd/system-generators/torcx-generator[2536]: time="2023-10-02T19:21:26Z" level=info msg="torcx already run" Oct 2 19:21:26.997133 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:21:26.997144 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:21:27.012838 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit: BPF prog-id=85 op=LOAD Oct 2 19:21:27.063000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.063000 audit: BPF prog-id=86 op=LOAD Oct 2 19:21:27.063000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit: BPF prog-id=87 op=LOAD Oct 2 19:21:27.064000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit: BPF prog-id=88 op=LOAD Oct 2 19:21:27.064000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.064000 audit: BPF prog-id=89 op=LOAD Oct 2 19:21:27.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit: BPF prog-id=90 op=LOAD Oct 2 19:21:27.065000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:21:27.065000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit: BPF prog-id=91 op=LOAD Oct 2 19:21:27.065000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit: BPF prog-id=92 op=LOAD Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.065000 audit: BPF prog-id=93 op=LOAD Oct 2 19:21:27.065000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:21:27.065000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit: BPF prog-id=94 op=LOAD Oct 2 19:21:27.066000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.066000 audit: BPF prog-id=95 op=LOAD Oct 2 19:21:27.066000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit: BPF prog-id=96 op=LOAD Oct 2 19:21:27.067000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.067000 audit: BPF prog-id=97 op=LOAD Oct 2 19:21:27.067000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit: BPF prog-id=98 op=LOAD Oct 2 19:21:27.068000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit: BPF prog-id=99 op=LOAD Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.068000 audit: BPF prog-id=100 op=LOAD Oct 2 19:21:27.068000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:21:27.068000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit: BPF prog-id=101 op=LOAD Oct 2 19:21:27.069000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit: BPF prog-id=102 op=LOAD Oct 2 19:21:27.070000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit: BPF prog-id=103 op=LOAD Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit: BPF prog-id=104 op=LOAD Oct 2 19:21:27.070000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:21:27.070000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.072000 audit: BPF prog-id=105 op=LOAD Oct 2 19:21:27.072000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:21:27.077814 systemd[1]: Stopping kubelet.service... Oct 2 19:21:27.097895 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:21:27.098001 systemd[1]: Stopped kubelet.service. Oct 2 19:21:27.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:27.098894 systemd[1]: Started kubelet.service. Oct 2 19:21:27.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:27.123341 kubelet[2598]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:21:27.123341 kubelet[2598]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:21:27.123341 kubelet[2598]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:27.123571 kubelet[2598]: I1002 19:21:27.123366 2598 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:21:27.124464 kubelet[2598]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:21:27.124464 kubelet[2598]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:21:27.124464 kubelet[2598]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:21:27.126302 kubelet[2598]: I1002 19:21:27.126292 2598 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:21:27.126302 kubelet[2598]: I1002 19:21:27.126303 2598 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:21:27.126421 kubelet[2598]: I1002 19:21:27.126416 2598 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:21:27.127098 kubelet[2598]: I1002 19:21:27.127089 2598 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:21:27.127479 kubelet[2598]: I1002 19:21:27.127469 2598 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:21:27.146138 kubelet[2598]: I1002 19:21:27.146077 2598 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:21:27.146189 kubelet[2598]: I1002 19:21:27.146182 2598 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:21:27.146259 kubelet[2598]: I1002 19:21:27.146221 2598 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:21:27.146259 kubelet[2598]: I1002 19:21:27.146231 2598 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:21:27.146259 kubelet[2598]: I1002 19:21:27.146238 2598 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:21:27.146259 kubelet[2598]: I1002 19:21:27.146256 2598 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:27.147668 kubelet[2598]: I1002 19:21:27.147660 2598 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:21:27.147702 kubelet[2598]: I1002 19:21:27.147673 2598 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:21:27.147702 kubelet[2598]: I1002 19:21:27.147686 2598 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:21:27.147702 kubelet[2598]: I1002 19:21:27.147696 2598 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:21:27.147967 kubelet[2598]: I1002 19:21:27.147957 2598 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:21:27.148225 kubelet[2598]: I1002 19:21:27.148218 2598 server.go:1175] "Started kubelet" Oct 2 19:21:27.148267 kubelet[2598]: I1002 19:21:27.148259 2598 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:21:27.148704 kubelet[2598]: E1002 19:21:27.148688 2598 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:21:27.148758 kubelet[2598]: E1002 19:21:27.148724 2598 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:21:27.149000 audit[2598]: AVC avc: denied { mac_admin } for pid=2598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.149000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:27.149000 audit[2598]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0005fe480 a1=c0006299c8 a2=c0005fe450 a3=25 items=0 ppid=1 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:27.149000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:27.149000 audit[2598]: AVC avc: denied { mac_admin } for pid=2598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.149000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:27.149000 audit[2598]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00026afc0 a1=c0006299e0 a2=c0005fe510 a3=25 items=0 ppid=1 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:27.149000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:27.150235 kubelet[2598]: I1002 19:21:27.149936 2598 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:21:27.150235 kubelet[2598]: I1002 19:21:27.149959 2598 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:21:27.150235 kubelet[2598]: I1002 19:21:27.149975 2598 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:21:27.150235 kubelet[2598]: I1002 19:21:27.150014 2598 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:21:27.150235 kubelet[2598]: I1002 19:21:27.150041 2598 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:21:27.150235 kubelet[2598]: I1002 19:21:27.150125 2598 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:21:27.150432 kubelet[2598]: E1002 19:21:27.150425 2598 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:27.161070 kubelet[2598]: I1002 19:21:27.161056 2598 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:21:27.166943 kubelet[2598]: I1002 19:21:27.166907 2598 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:21:27.166943 kubelet[2598]: I1002 19:21:27.166927 2598 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:21:27.166943 kubelet[2598]: I1002 19:21:27.166938 2598 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:21:27.167067 kubelet[2598]: E1002 19:21:27.166966 2598 kubelet.go:2034] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:21:27.168956 kubelet[2598]: I1002 19:21:27.168947 2598 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:21:27.168956 kubelet[2598]: I1002 19:21:27.168955 2598 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:21:27.169017 kubelet[2598]: I1002 19:21:27.168963 2598 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:21:27.169051 kubelet[2598]: I1002 19:21:27.169046 2598 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:21:27.169078 kubelet[2598]: I1002 19:21:27.169054 2598 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:21:27.169078 kubelet[2598]: I1002 19:21:27.169060 2598 policy_none.go:49] "None policy: Start" Oct 2 19:21:27.169271 kubelet[2598]: I1002 19:21:27.169266 2598 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:21:27.169290 kubelet[2598]: I1002 19:21:27.169276 2598 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:21:27.169350 kubelet[2598]: I1002 19:21:27.169345 2598 state_mem.go:75] "Updated machine memory state" Oct 2 19:21:27.170925 kubelet[2598]: I1002 19:21:27.170918 2598 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:21:27.170000 audit[2598]: AVC avc: denied { mac_admin } for pid=2598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:27.170000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:21:27.170000 audit[2598]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00103e9f0 a1=c000f938a8 a2=c00103e9c0 a3=25 items=0 ppid=1 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:27.170000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:21:27.171069 kubelet[2598]: I1002 19:21:27.170948 2598 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:21:27.171069 kubelet[2598]: I1002 19:21:27.171058 2598 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:21:27.257005 kubelet[2598]: I1002 19:21:27.256900 2598 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.267657 kubelet[2598]: I1002 19:21:27.267567 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:27.268047 kubelet[2598]: I1002 19:21:27.267739 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:27.268047 kubelet[2598]: I1002 19:21:27.267845 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:27.269421 kubelet[2598]: I1002 19:21:27.269337 2598 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.269636 kubelet[2598]: I1002 19:21:27.269533 2598 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.353196 kubelet[2598]: E1002 19:21:27.353147 2598 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450521 kubelet[2598]: I1002 19:21:27.450441 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/bd3d313a9096d366ab17b88ac9479833-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" (UID: \"bd3d313a9096d366ab17b88ac9479833\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450521 kubelet[2598]: I1002 19:21:27.450473 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450521 kubelet[2598]: I1002 19:21:27.450490 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450521 kubelet[2598]: I1002 19:21:27.450506 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450663 kubelet[2598]: I1002 19:21:27.450527 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450663 kubelet[2598]: I1002 19:21:27.450544 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/bd3d313a9096d366ab17b88ac9479833-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" (UID: \"bd3d313a9096d366ab17b88ac9479833\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450663 kubelet[2598]: I1002 19:21:27.450563 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fc1cdfced4ee08e6c7602791e6fb8b42-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" (UID: \"fc1cdfced4ee08e6c7602791e6fb8b42\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450663 kubelet[2598]: I1002 19:21:27.450580 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/864ebc9a73e4006e95a1b52d7498a5a6-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-a82eb4d27c\" (UID: \"864ebc9a73e4006e95a1b52d7498a5a6\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.450663 kubelet[2598]: I1002 19:21:27.450600 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/bd3d313a9096d366ab17b88ac9479833-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" (UID: \"bd3d313a9096d366ab17b88ac9479833\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.552594 kubelet[2598]: E1002 19:21:27.552561 2598 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-a82eb4d27c\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.655000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:27.684291 kernel: kauditd_printk_skb: 272 callbacks suppressed Oct 2 19:21:27.684355 kernel: audit: type=1400 audit(1696274487.655:955): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:27.655000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000132600 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:27.896847 kernel: audit: type=1300 audit(1696274487.655:955): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000132600 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:27.896914 kernel: audit: type=1327 audit(1696274487.655:955): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:27.655000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:27.655000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:28.081857 kernel: audit: type=1400 audit(1696274487.655:956): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:28.082042 kernel: audit: type=1300 audit(1696274487.655:956): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0001326c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:27.655000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0001326c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:28.148632 kubelet[2598]: I1002 19:21:28.148538 2598 apiserver.go:52] "Watching apiserver" Oct 2 19:21:27.655000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:28.255828 kubelet[2598]: I1002 19:21:28.255766 2598 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:21:28.297949 kernel: audit: type=1327 audit(1696274487.655:956): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:28.298027 kernel: audit: type=1400 audit(1696274487.656:957): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:27.656000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:28.389000 kernel: audit: type=1300 audit(1696274487.656:957): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000132980 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:27.656000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000132980 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:28.510781 kernel: audit: type=1327 audit(1696274487.656:957): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:27.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:28.552013 kubelet[2598]: E1002 19:21:28.551994 2598 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-a82eb4d27c\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:27.656000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:28.696032 kernel: audit: type=1400 audit(1696274487.656:958): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:27.656000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001638200 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:27.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:28.756130 kubelet[2598]: E1002 19:21:28.756046 2598 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-a82eb4d27c\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-a82eb4d27c" Oct 2 19:21:30.731313 sudo[1619]: pam_unix(sudo:session): session closed for user root Oct 2 19:21:30.730000 audit[1619]: USER_END pid=1619 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:30.730000 audit[1619]: CRED_DISP pid=1619 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:21:30.732342 sshd[1616]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:30.732000 audit[1616]: USER_END pid=1616 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:30.732000 audit[1616]: CRED_DISP pid=1616 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:21:30.734162 systemd[1]: sshd@6-145.40.90.157:22-139.178.89.65:53014.service: Deactivated successfully. Oct 2 19:21:30.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-145.40.90.157:22-139.178.89.65:53014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:30.734741 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:21:30.734863 systemd[1]: session-9.scope: Consumed 2.308s CPU time. Oct 2 19:21:30.735271 systemd-logind[1456]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:21:30.736149 systemd-logind[1456]: Removed session 9. Oct 2 19:21:32.172217 kubelet[2598]: E1002 19:21:32.172116 2598 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:37.173239 kubelet[2598]: E1002 19:21:37.173136 2598 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:39.951000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521299 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:21:39.990390 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:21:39.990483 kernel: audit: type=1400 audit(1696274499.951:964): avc: denied { watch } for pid=2418 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521299 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:21:39.951000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001570e40 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:40.204083 kernel: audit: type=1300 audit(1696274499.951:964): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001570e40 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:21:40.204153 kernel: audit: type=1327 audit(1696274499.951:964): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:39.951000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:40.520343 kubelet[2598]: I1002 19:21:40.520248 2598 kuberuntime_manager.go:1050] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:21:40.520607 env[1466]: time="2023-10-02T19:21:40.520566548Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:21:40.520719 kubelet[2598]: I1002 19:21:40.520685 2598 kubelet_network.go:60] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:21:40.520899 kubelet[2598]: E1002 19:21:40.520864 2598 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:41.295231 kubelet[2598]: I1002 19:21:41.295155 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:41.309065 systemd[1]: Created slice kubepods-besteffort-pod9f0e1ec2_c4be_4e53_ae97_4ac501269463.slice. Oct 2 19:21:41.445514 kubelet[2598]: I1002 19:21:41.445422 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9f0e1ec2-c4be-4e53-ae97-4ac501269463-xtables-lock\") pod \"kube-proxy-5pmvl\" (UID: \"9f0e1ec2-c4be-4e53-ae97-4ac501269463\") " pod="kube-system/kube-proxy-5pmvl" Oct 2 19:21:41.445855 kubelet[2598]: I1002 19:21:41.445572 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tf8gf\" (UniqueName: \"kubernetes.io/projected/9f0e1ec2-c4be-4e53-ae97-4ac501269463-kube-api-access-tf8gf\") pod \"kube-proxy-5pmvl\" (UID: \"9f0e1ec2-c4be-4e53-ae97-4ac501269463\") " pod="kube-system/kube-proxy-5pmvl" Oct 2 19:21:41.445855 kubelet[2598]: I1002 19:21:41.445657 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/9f0e1ec2-c4be-4e53-ae97-4ac501269463-kube-proxy\") pod \"kube-proxy-5pmvl\" (UID: \"9f0e1ec2-c4be-4e53-ae97-4ac501269463\") " pod="kube-system/kube-proxy-5pmvl" Oct 2 19:21:41.445855 kubelet[2598]: I1002 19:21:41.445723 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9f0e1ec2-c4be-4e53-ae97-4ac501269463-lib-modules\") pod \"kube-proxy-5pmvl\" (UID: \"9f0e1ec2-c4be-4e53-ae97-4ac501269463\") " pod="kube-system/kube-proxy-5pmvl" Oct 2 19:21:41.560935 kubelet[2598]: I1002 19:21:41.560792 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:41.576940 systemd[1]: Created slice kubepods-besteffort-pod3a1ec732_b3d5_478d_aec9_8f19df62100b.slice. Oct 2 19:21:41.626981 env[1466]: time="2023-10-02T19:21:41.626879536Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5pmvl,Uid:9f0e1ec2-c4be-4e53-ae97-4ac501269463,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:41.647465 kubelet[2598]: I1002 19:21:41.647412 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6w6sz\" (UniqueName: \"kubernetes.io/projected/3a1ec732-b3d5-478d-aec9-8f19df62100b-kube-api-access-6w6sz\") pod \"tigera-operator-64db64cb98-hcftq\" (UID: \"3a1ec732-b3d5-478d-aec9-8f19df62100b\") " pod="tigera-operator/tigera-operator-64db64cb98-hcftq" Oct 2 19:21:41.647761 kubelet[2598]: I1002 19:21:41.647559 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3a1ec732-b3d5-478d-aec9-8f19df62100b-var-lib-calico\") pod \"tigera-operator-64db64cb98-hcftq\" (UID: \"3a1ec732-b3d5-478d-aec9-8f19df62100b\") " pod="tigera-operator/tigera-operator-64db64cb98-hcftq" Oct 2 19:21:41.651812 env[1466]: time="2023-10-02T19:21:41.651642748Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:41.651812 env[1466]: time="2023-10-02T19:21:41.651737945Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:41.651812 env[1466]: time="2023-10-02T19:21:41.651776756Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:41.652308 env[1466]: time="2023-10-02T19:21:41.652179587Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a28434fb26f936845c71e18d9d8bf48ec796cd6bb3fe178a5c25b0a949042507 pid=2789 runtime=io.containerd.runc.v2 Oct 2 19:21:41.693949 systemd[1]: Started cri-containerd-a28434fb26f936845c71e18d9d8bf48ec796cd6bb3fe178a5c25b0a949042507.scope. Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.843911 kernel: audit: type=1400 audit(1696274501.714:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.843954 kernel: audit: type=1400 audit(1696274501.714:966): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.843971 kernel: audit: type=1400 audit(1696274501.714:967): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.880836 env[1466]: time="2023-10-02T19:21:41.880787185Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-64db64cb98-hcftq,Uid:3a1ec732-b3d5-478d-aec9-8f19df62100b,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:21:41.887550 env[1466]: time="2023-10-02T19:21:41.887479725Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:41.887550 env[1466]: time="2023-10-02T19:21:41.887504727Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:41.887550 env[1466]: time="2023-10-02T19:21:41.887514936Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:41.887655 env[1466]: time="2023-10-02T19:21:41.887601573Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9628dc93ff251d6f52523271051ed12bcb66b85588781f664a27d9dd15fab9ac pid=2824 runtime=io.containerd.runc.v2 Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.929339 update_engine[1458]: I1002 19:21:41.929322 1458 update_attempter.cc:505] Updating boot flags... Oct 2 19:21:41.971198 kernel: audit: type=1400 audit(1696274501.714:968): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.971330 kernel: audit: type=1400 audit(1696274501.714:969): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.978746 systemd[1]: Started cri-containerd-9628dc93ff251d6f52523271051ed12bcb66b85588781f664a27d9dd15fab9ac.scope. Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098884 kernel: audit: type=1400 audit(1696274501.714:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098945 kernel: audit: type=1400 audit(1696274501.714:971): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit: BPF prog-id=106 op=LOAD Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2789 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:41.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383433346662323666393336383435633731653138643964386266 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2789 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:41.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383433346662323666393336383435633731653138643964386266 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.842000 audit: BPF prog-id=107 op=LOAD Oct 2 19:21:41.842000 audit[2799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000324700 items=0 ppid=2789 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:41.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383433346662323666393336383435633731653138643964386266 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:41.969000 audit: BPF prog-id=108 op=LOAD Oct 2 19:21:41.969000 audit[2799]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003b91b8 items=0 ppid=2789 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:41.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383433346662323666393336383435633731653138643964386266 Oct 2 19:21:42.098000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:21:42.098000 audit: BPF prog-id=107 op=UNLOAD Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { perfmon } for pid=2799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit: BPF prog-id=109 op=LOAD Oct 2 19:21:42.098000 audit[2799]: AVC avc: denied { bpf } for pid=2799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.098000 audit: BPF prog-id=110 op=LOAD Oct 2 19:21:42.098000 audit[2799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000505228 items=0 ppid=2789 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383433346662323666393336383435633731653138643964386266 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2824 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936323864633933666632353164366635323532333237313035316564 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2824 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936323864633933666632353164366635323532333237313035316564 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit: BPF prog-id=111 op=LOAD Oct 2 19:21:42.162000 audit[2834]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000524160 items=0 ppid=2824 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936323864633933666632353164366635323532333237313035316564 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit: BPF prog-id=112 op=LOAD Oct 2 19:21:42.162000 audit[2834]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0005241a8 items=0 ppid=2824 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936323864633933666632353164366635323532333237313035316564 Oct 2 19:21:42.162000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:21:42.162000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { perfmon } for pid=2834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit[2834]: AVC avc: denied { bpf } for pid=2834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.162000 audit: BPF prog-id=113 op=LOAD Oct 2 19:21:42.162000 audit[2834]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0005245b8 items=0 ppid=2824 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936323864633933666632353164366635323532333237313035316564 Oct 2 19:21:42.173649 kubelet[2598]: E1002 19:21:42.173637 2598 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:42.179220 env[1466]: time="2023-10-02T19:21:42.179193645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5pmvl,Uid:9f0e1ec2-c4be-4e53-ae97-4ac501269463,Namespace:kube-system,Attempt:0,} returns sandbox id \"a28434fb26f936845c71e18d9d8bf48ec796cd6bb3fe178a5c25b0a949042507\"" Oct 2 19:21:42.179339 env[1466]: time="2023-10-02T19:21:42.179325828Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-64db64cb98-hcftq,Uid:3a1ec732-b3d5-478d-aec9-8f19df62100b,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"9628dc93ff251d6f52523271051ed12bcb66b85588781f664a27d9dd15fab9ac\"" Oct 2 19:21:42.180001 env[1466]: time="2023-10-02T19:21:42.179983953Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:21:42.180422 env[1466]: time="2023-10-02T19:21:42.180410526Z" level=info msg="CreateContainer within sandbox \"a28434fb26f936845c71e18d9d8bf48ec796cd6bb3fe178a5c25b0a949042507\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:21:42.186706 env[1466]: time="2023-10-02T19:21:42.186655351Z" level=info msg="CreateContainer within sandbox \"a28434fb26f936845c71e18d9d8bf48ec796cd6bb3fe178a5c25b0a949042507\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"fb3a0f8c759f6a4536deb4e1d464aa12669244893fec8c84485ddfa1cbfdcc4e\"" Oct 2 19:21:42.186957 env[1466]: time="2023-10-02T19:21:42.186942274Z" level=info msg="StartContainer for \"fb3a0f8c759f6a4536deb4e1d464aa12669244893fec8c84485ddfa1cbfdcc4e\"" Oct 2 19:21:42.206396 systemd[1]: Started cri-containerd-fb3a0f8c759f6a4536deb4e1d464aa12669244893fec8c84485ddfa1cbfdcc4e.scope. Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2789 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662336130663863373539663661343533366465623465316434363461 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit: BPF prog-id=114 op=LOAD Oct 2 19:21:42.214000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000efc70 items=0 ppid=2789 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662336130663863373539663661343533366465623465316434363461 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit: BPF prog-id=115 op=LOAD Oct 2 19:21:42.214000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000efcb8 items=0 ppid=2789 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662336130663863373539663661343533366465623465316434363461 Oct 2 19:21:42.214000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:21:42.214000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:42.214000 audit: BPF prog-id=116 op=LOAD Oct 2 19:21:42.214000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000efd48 items=0 ppid=2789 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662336130663863373539663661343533366465623465316434363461 Oct 2 19:21:42.221097 env[1466]: time="2023-10-02T19:21:42.221072249Z" level=info msg="StartContainer for \"fb3a0f8c759f6a4536deb4e1d464aa12669244893fec8c84485ddfa1cbfdcc4e\" returns successfully" Oct 2 19:21:42.346241 kernel: IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) Oct 2 19:21:42.346314 kernel: IPVS: Connection hash table configured (size=4096, memory=32Kbytes) Oct 2 19:21:42.346329 kernel: IPVS: ipvs loaded. Oct 2 19:21:42.399520 kernel: IPVS: [rr] scheduler registered. Oct 2 19:21:42.428532 kernel: IPVS: [wrr] scheduler registered. Oct 2 19:21:42.456542 kernel: IPVS: [sh] scheduler registered. Oct 2 19:21:42.476000 audit[2950]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2950 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.476000 audit[2950]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfa3b1df0 a2=0 a3=7ffcfa3b1ddc items=0 ppid=2897 pid=2950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:21:42.476000 audit[2951]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2951 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.476000 audit[2951]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde5486460 a2=0 a3=7ffde548644c items=0 ppid=2897 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.476000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:21:42.476000 audit[2952]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.476000 audit[2952]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa1dee780 a2=0 a3=7fffa1dee76c items=0 ppid=2897 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:21:42.476000 audit[2953]: NETFILTER_CFG table=nat:62 family=10 entries=1 op=nft_register_chain pid=2953 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.476000 audit[2953]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb972d300 a2=0 a3=7fffb972d2ec items=0 ppid=2897 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.476000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:21:42.477000 audit[2954]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_chain pid=2954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.477000 audit[2954]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9af2db70 a2=0 a3=7fff9af2db5c items=0 ppid=2897 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.477000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:21:42.477000 audit[2955]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=2955 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.477000 audit[2955]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0df0c950 a2=0 a3=7ffd0df0c93c items=0 ppid=2897 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.477000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:21:42.581000 audit[2959]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.581000 audit[2959]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcad5707c0 a2=0 a3=7ffcad5707ac items=0 ppid=2897 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:21:42.588000 audit[2961]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.588000 audit[2961]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc06bb31e0 a2=0 a3=7ffc06bb31cc items=0 ppid=2897 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:21:42.599000 audit[2964]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2964 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.599000 audit[2964]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdb62d8180 a2=0 a3=7ffdb62d816c items=0 ppid=2897 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.599000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:21:42.602000 audit[2965]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.602000 audit[2965]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd82a06ff0 a2=0 a3=7ffd82a06fdc items=0 ppid=2897 pid=2965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:21:42.609000 audit[2967]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.609000 audit[2967]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdd04a8930 a2=0 a3=7ffdd04a891c items=0 ppid=2897 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.609000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:21:42.612000 audit[2968]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.612000 audit[2968]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2a849120 a2=0 a3=7ffc2a84910c items=0 ppid=2897 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.612000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:21:42.619000 audit[2970]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2970 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.619000 audit[2970]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcf3fc5d60 a2=0 a3=7ffcf3fc5d4c items=0 ppid=2897 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.619000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:21:42.629000 audit[2973]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2973 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.629000 audit[2973]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff0afb2930 a2=0 a3=7fff0afb291c items=0 ppid=2897 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.629000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:21:42.632000 audit[2974]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.632000 audit[2974]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff174176a0 a2=0 a3=7fff1741768c items=0 ppid=2897 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.632000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:21:42.638000 audit[2976]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.638000 audit[2976]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcd1b3c960 a2=0 a3=7ffcd1b3c94c items=0 ppid=2897 pid=2976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.638000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:21:42.641000 audit[2977]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2977 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.641000 audit[2977]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc94b917f0 a2=0 a3=7ffc94b917dc items=0 ppid=2897 pid=2977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.641000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:21:42.647000 audit[2979]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2979 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.647000 audit[2979]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd156b28e0 a2=0 a3=7ffd156b28cc items=0 ppid=2897 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.647000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:21:42.656000 audit[2982]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.656000 audit[2982]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe393b3c20 a2=0 a3=7ffe393b3c0c items=0 ppid=2897 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:21:42.665000 audit[2985]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2985 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.665000 audit[2985]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd60a2f940 a2=0 a3=7ffd60a2f92c items=0 ppid=2897 pid=2985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.665000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:21:42.668000 audit[2986]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.668000 audit[2986]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe59be8f30 a2=0 a3=7ffe59be8f1c items=0 ppid=2897 pid=2986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:21:42.674000 audit[2988]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.674000 audit[2988]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffed1fd3480 a2=0 a3=7ffed1fd346c items=0 ppid=2897 pid=2988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.674000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:42.683000 audit[2991]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:21:42.683000 audit[2991]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdee17a3a0 a2=0 a3=7ffdee17a38c items=0 ppid=2897 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.683000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:42.710000 audit[2995]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:42.710000 audit[2995]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffe7020a6e0 a2=0 a3=7ffe7020a6cc items=0 ppid=2897 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.710000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:42.726000 audit[2995]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:42.726000 audit[2995]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffe7020a6e0 a2=0 a3=7ffe7020a6cc items=0 ppid=2897 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.726000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:42.729000 audit[2998]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2998 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.729000 audit[2998]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe0f48bc50 a2=0 a3=7ffe0f48bc3c items=0 ppid=2897 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:21:42.735000 audit[3000]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.735000 audit[3000]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffeddc407a0 a2=0 a3=7ffeddc4078c items=0 ppid=2897 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:21:42.745000 audit[3003]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3003 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.745000 audit[3003]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcd163fac0 a2=0 a3=7ffcd163faac items=0 ppid=2897 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.745000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:21:42.748000 audit[3004]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3004 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.748000 audit[3004]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe059adff0 a2=0 a3=7ffe059adfdc items=0 ppid=2897 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:21:42.754000 audit[3006]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3006 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.754000 audit[3006]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc681c2550 a2=0 a3=7ffc681c253c items=0 ppid=2897 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.754000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:21:42.757000 audit[3007]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3007 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.757000 audit[3007]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe78253da0 a2=0 a3=7ffe78253d8c items=0 ppid=2897 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.757000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:21:42.763000 audit[3009]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3009 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.763000 audit[3009]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff4ed22630 a2=0 a3=7fff4ed2261c items=0 ppid=2897 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.763000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:21:42.771000 audit[3012]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3012 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.771000 audit[3012]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff0be63550 a2=0 a3=7fff0be6353c items=0 ppid=2897 pid=3012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.771000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:21:42.773000 audit[3013]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3013 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.773000 audit[3013]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc885d4730 a2=0 a3=7ffc885d471c items=0 ppid=2897 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:21:42.780000 audit[3015]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3015 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.780000 audit[3015]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffe9548fa0 a2=0 a3=7fffe9548f8c items=0 ppid=2897 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.780000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:21:42.783000 audit[3016]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3016 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.783000 audit[3016]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd880a46e0 a2=0 a3=7ffd880a46cc items=0 ppid=2897 pid=3016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.783000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:21:42.789000 audit[3018]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3018 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.789000 audit[3018]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc3b941cd0 a2=0 a3=7ffc3b941cbc items=0 ppid=2897 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.789000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:21:42.798000 audit[3021]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3021 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.798000 audit[3021]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc327543c0 a2=0 a3=7ffc327543ac items=0 ppid=2897 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.798000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:21:42.806000 audit[3024]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3024 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.806000 audit[3024]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff6520b2d0 a2=0 a3=7fff6520b2bc items=0 ppid=2897 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.806000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:21:42.810000 audit[3025]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3025 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.810000 audit[3025]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff4d77e2c0 a2=0 a3=7fff4d77e2ac items=0 ppid=2897 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.810000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:21:42.815000 audit[3027]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3027 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.815000 audit[3027]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe1319c0a0 a2=0 a3=7ffe1319c08c items=0 ppid=2897 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.815000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:42.824000 audit[3030]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3030 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:21:42.824000 audit[3030]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff1899da50 a2=0 a3=7fff1899da3c items=0 ppid=2897 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:21:42.836000 audit[3034]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3034 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:21:42.836000 audit[3034]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffe9ead7640 a2=0 a3=7ffe9ead762c items=0 ppid=2897 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.836000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:42.837000 audit[3034]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3034 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:21:42.837000 audit[3034]: SYSCALL arch=c000003e syscall=46 success=yes exit=1860 a0=3 a1=7ffe9ead7640 a2=0 a3=7ffe9ead762c items=0 ppid=2897 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:42.837000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:44.410836 env[1466]: time="2023-10-02T19:21:44.410691150Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:44.516660 env[1466]: time="2023-10-02T19:21:44.516483280Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:44.552447 env[1466]: time="2023-10-02T19:21:44.552313612Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:44.591755 env[1466]: time="2023-10-02T19:21:44.591609127Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:44.594182 env[1466]: time="2023-10-02T19:21:44.594055754Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:21:44.598619 env[1466]: time="2023-10-02T19:21:44.598483387Z" level=info msg="CreateContainer within sandbox \"9628dc93ff251d6f52523271051ed12bcb66b85588781f664a27d9dd15fab9ac\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:21:44.614102 env[1466]: time="2023-10-02T19:21:44.613960613Z" level=info msg="CreateContainer within sandbox \"9628dc93ff251d6f52523271051ed12bcb66b85588781f664a27d9dd15fab9ac\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"c689da4001cbbb4a770642dbb02d3b1b70df4ea788b1aecf205024a13ec79596\"" Oct 2 19:21:44.614987 env[1466]: time="2023-10-02T19:21:44.614843346Z" level=info msg="StartContainer for \"c689da4001cbbb4a770642dbb02d3b1b70df4ea788b1aecf205024a13ec79596\"" Oct 2 19:21:44.664436 systemd[1]: Started cri-containerd-c689da4001cbbb4a770642dbb02d3b1b70df4ea788b1aecf205024a13ec79596.scope. Oct 2 19:21:44.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.686000 audit: BPF prog-id=117 op=LOAD Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2824 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:44.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336383964613430303163626262346137373036343264626230326433 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2824 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:44.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336383964613430303163626262346137373036343264626230326433 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit: BPF prog-id=118 op=LOAD Oct 2 19:21:44.687000 audit[3042]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ac560 items=0 ppid=2824 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:44.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336383964613430303163626262346137373036343264626230326433 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.687000 audit: BPF prog-id=119 op=LOAD Oct 2 19:21:44.687000 audit[3042]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ac5a8 items=0 ppid=2824 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:44.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336383964613430303163626262346137373036343264626230326433 Oct 2 19:21:44.688000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:21:44.688000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { perfmon } for pid=3042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit[3042]: AVC avc: denied { bpf } for pid=3042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:44.688000 audit: BPF prog-id=120 op=LOAD Oct 2 19:21:44.688000 audit[3042]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ac9b8 items=0 ppid=2824 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:44.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336383964613430303163626262346137373036343264626230326433 Oct 2 19:21:44.725989 env[1466]: time="2023-10-02T19:21:44.725864074Z" level=info msg="StartContainer for \"c689da4001cbbb4a770642dbb02d3b1b70df4ea788b1aecf205024a13ec79596\" returns successfully" Oct 2 19:21:46.628000 audit[3109]: NETFILTER_CFG table=filter:103 family=2 entries=13 op=nft_register_rule pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:46.669287 kernel: kauditd_printk_skb: 339 callbacks suppressed Oct 2 19:21:46.669366 kernel: audit: type=1325 audit(1696274506.628:1069): table=filter:103 family=2 entries=13 op=nft_register_rule pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:46.628000 audit[3109]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffcebd25ef0 a2=0 a3=7ffcebd25edc items=0 ppid=2897 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.781263 kubelet[2598]: I1002 19:21:46.781099 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:46.785547 systemd[1]: Created slice kubepods-besteffort-podb82ec8ca_dd39_44a4_9738_fb75b39423ec.slice. Oct 2 19:21:46.795203 kubelet[2598]: I1002 19:21:46.795179 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:46.798281 systemd[1]: Created slice kubepods-besteffort-poded7c86e0_d6ec_4ad9_a42e_7d266b02e887.slice. Oct 2 19:21:46.817396 kernel: audit: type=1300 audit(1696274506.628:1069): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffcebd25ef0 a2=0 a3=7ffcebd25edc items=0 ppid=2897 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.817440 kernel: audit: type=1327 audit(1696274506.628:1069): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:46.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:46.629000 audit[3109]: NETFILTER_CFG table=nat:104 family=2 entries=20 op=nft_register_rule pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:46.629000 audit[3109]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffcebd25ef0 a2=0 a3=7ffcebd25edc items=0 ppid=2897 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:46.979798 kubelet[2598]: I1002 19:21:46.979776 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-cni-bin-dir\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.979902 kubelet[2598]: I1002 19:21:46.979809 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-xtables-lock\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.979902 kubelet[2598]: I1002 19:21:46.979843 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-lib-modules\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.979902 kubelet[2598]: I1002 19:21:46.979887 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-cni-log-dir\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.979969 kubelet[2598]: I1002 19:21:46.979919 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b82ec8ca-dd39-44a4-9738-fb75b39423ec-tigera-ca-bundle\") pod \"calico-typha-848f9fffc5-58pxw\" (UID: \"b82ec8ca-dd39-44a4-9738-fb75b39423ec\") " pod="calico-system/calico-typha-848f9fffc5-58pxw" Oct 2 19:21:46.979969 kubelet[2598]: I1002 19:21:46.979935 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-node-certs\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.979969 kubelet[2598]: I1002 19:21:46.979966 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/b82ec8ca-dd39-44a4-9738-fb75b39423ec-typha-certs\") pod \"calico-typha-848f9fffc5-58pxw\" (UID: \"b82ec8ca-dd39-44a4-9738-fb75b39423ec\") " pod="calico-system/calico-typha-848f9fffc5-58pxw" Oct 2 19:21:46.980042 kubelet[2598]: I1002 19:21:46.979989 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-cni-net-dir\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.980042 kubelet[2598]: I1002 19:21:46.980023 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-tigera-ca-bundle\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.980088 kubelet[2598]: I1002 19:21:46.980053 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-var-run-calico\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.980088 kubelet[2598]: I1002 19:21:46.980069 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-var-lib-calico\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.980147 kubelet[2598]: I1002 19:21:46.980098 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-policysync\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.980147 kubelet[2598]: I1002 19:21:46.980126 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kkt9q\" (UniqueName: \"kubernetes.io/projected/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-kube-api-access-kkt9q\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:46.980187 kubelet[2598]: I1002 19:21:46.980169 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zrjx6\" (UniqueName: \"kubernetes.io/projected/b82ec8ca-dd39-44a4-9738-fb75b39423ec-kube-api-access-zrjx6\") pod \"calico-typha-848f9fffc5-58pxw\" (UID: \"b82ec8ca-dd39-44a4-9738-fb75b39423ec\") " pod="calico-system/calico-typha-848f9fffc5-58pxw" Oct 2 19:21:46.980209 kubelet[2598]: I1002 19:21:46.980191 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/ed7c86e0-d6ec-4ad9-a42e-7d266b02e887-flexvol-driver-host\") pod \"calico-node-bttnn\" (UID: \"ed7c86e0-d6ec-4ad9-a42e-7d266b02e887\") " pod="calico-system/calico-node-bttnn" Oct 2 19:21:47.025039 kernel: audit: type=1325 audit(1696274506.629:1070): table=nat:104 family=2 entries=20 op=nft_register_rule pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:47.025152 kernel: audit: type=1300 audit(1696274506.629:1070): arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffcebd25ef0 a2=0 a3=7ffcebd25edc items=0 ppid=2897 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.025167 kernel: audit: type=1327 audit(1696274506.629:1070): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:46.629000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:46.906000 audit[3135]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=3135 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:47.082548 kubelet[2598]: E1002 19:21:47.082528 2598 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:47.082548 kubelet[2598]: W1002 19:21:47.082546 2598 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:47.082659 kubelet[2598]: E1002 19:21:47.082563 2598 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:47.083067 kubelet[2598]: E1002 19:21:47.083055 2598 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:47.083107 kubelet[2598]: W1002 19:21:47.083069 2598 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:47.083107 kubelet[2598]: E1002 19:21:47.083092 2598 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:47.083624 kubelet[2598]: E1002 19:21:47.083617 2598 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:47.083624 kubelet[2598]: W1002 19:21:47.083623 2598 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:47.083682 kubelet[2598]: E1002 19:21:47.083633 2598 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:47.083736 kubelet[2598]: E1002 19:21:47.083729 2598 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:47.083763 kubelet[2598]: W1002 19:21:47.083737 2598 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:47.083763 kubelet[2598]: E1002 19:21:47.083747 2598 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:47.087400 kubelet[2598]: E1002 19:21:47.087381 2598 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:47.087400 kubelet[2598]: W1002 19:21:47.087389 2598 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:47.087400 kubelet[2598]: E1002 19:21:47.087401 2598 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:47.087549 kubelet[2598]: E1002 19:21:47.087503 2598 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:21:47.087549 kubelet[2598]: W1002 19:21:47.087507 2598 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:21:47.087549 kubelet[2598]: E1002 19:21:47.087513 2598 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:21:47.100010 env[1466]: time="2023-10-02T19:21:47.099961688Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-bttnn,Uid:ed7c86e0-d6ec-4ad9-a42e-7d266b02e887,Namespace:calico-system,Attempt:0,}" Oct 2 19:21:47.115084 env[1466]: time="2023-10-02T19:21:47.115019714Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:47.115084 env[1466]: time="2023-10-02T19:21:47.115039424Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:47.115084 env[1466]: time="2023-10-02T19:21:47.115046289Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:47.115193 env[1466]: time="2023-10-02T19:21:47.115106691Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc pid=3153 runtime=io.containerd.runc.v2 Oct 2 19:21:46.906000 audit[3135]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7fff43b05350 a2=0 a3=7fff43b0533c items=0 ppid=2897 pid=3135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.153183 systemd[1]: Started cri-containerd-a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc.scope. Oct 2 19:21:47.174346 kubelet[2598]: E1002 19:21:47.174330 2598 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:47.231457 kernel: audit: type=1325 audit(1696274506.906:1071): table=filter:105 family=2 entries=14 op=nft_register_rule pid=3135 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:47.231581 kernel: audit: type=1300 audit(1696274506.906:1071): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7fff43b05350 a2=0 a3=7fff43b0533c items=0 ppid=2897 pid=3135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.231598 kernel: audit: type=1327 audit(1696274506.906:1071): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:46.906000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348076 kernel: audit: type=1400 audit(1696274507.238:1072): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit: BPF prog-id=121 op=LOAD Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3153 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131316336623636393939653235303561316464666236336361333262 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3153 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131316336623636393939653235303561316464666236336361333262 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.347000 audit: BPF prog-id=122 op=LOAD Oct 2 19:21:47.347000 audit[3163]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000025150 items=0 ppid=3153 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131316336623636393939653235303561316464666236336361333262 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit: BPF prog-id=123 op=LOAD Oct 2 19:21:47.348000 audit[3163]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000025198 items=0 ppid=3153 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131316336623636393939653235303561316464666236336361333262 Oct 2 19:21:47.348000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:21:47.348000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.348000 audit: BPF prog-id=124 op=LOAD Oct 2 19:21:47.348000 audit[3163]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000255a8 items=0 ppid=3153 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131316336623636393939653235303561316464666236336361333262 Oct 2 19:21:47.081000 audit[3135]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=3135 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:47.081000 audit[3135]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff43b05350 a2=0 a3=7fff43b0533c items=0 ppid=2897 pid=3135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:47.365615 env[1466]: time="2023-10-02T19:21:47.365592693Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-bttnn,Uid:ed7c86e0-d6ec-4ad9-a42e-7d266b02e887,Namespace:calico-system,Attempt:0,} returns sandbox id \"a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc\"" Oct 2 19:21:47.366145 env[1466]: time="2023-10-02T19:21:47.366132025Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:21:47.387081 env[1466]: time="2023-10-02T19:21:47.387067129Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-848f9fffc5-58pxw,Uid:b82ec8ca-dd39-44a4-9738-fb75b39423ec,Namespace:calico-system,Attempt:0,}" Oct 2 19:21:47.393414 env[1466]: time="2023-10-02T19:21:47.393355374Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:21:47.393414 env[1466]: time="2023-10-02T19:21:47.393376796Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:21:47.393414 env[1466]: time="2023-10-02T19:21:47.393384084Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:21:47.393521 env[1466]: time="2023-10-02T19:21:47.393448386Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b4e0c6a9969b3550e3a47979bc74a6a030de7250437ef685dd3ed9313f8261f1 pid=3194 runtime=io.containerd.runc.v2 Oct 2 19:21:47.412093 systemd[1]: Started cri-containerd-b4e0c6a9969b3550e3a47979bc74a6a030de7250437ef685dd3ed9313f8261f1.scope. Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.420000 audit: BPF prog-id=125 op=LOAD Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3194 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234653063366139393639623335353065336134373937396263373461 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3194 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234653063366139393639623335353065336134373937396263373461 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit: BPF prog-id=126 op=LOAD Oct 2 19:21:47.421000 audit[3203]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00009aa90 items=0 ppid=3194 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234653063366139393639623335353065336134373937396263373461 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit: BPF prog-id=127 op=LOAD Oct 2 19:21:47.421000 audit[3203]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00009aad8 items=0 ppid=3194 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234653063366139393639623335353065336134373937396263373461 Oct 2 19:21:47.421000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:21:47.421000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { perfmon } for pid=3203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit[3203]: AVC avc: denied { bpf } for pid=3203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:47.421000 audit: BPF prog-id=128 op=LOAD Oct 2 19:21:47.421000 audit[3203]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00009aee8 items=0 ppid=3194 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234653063366139393639623335353065336134373937396263373461 Oct 2 19:21:47.454576 env[1466]: time="2023-10-02T19:21:47.454529037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-848f9fffc5-58pxw,Uid:b82ec8ca-dd39-44a4-9738-fb75b39423ec,Namespace:calico-system,Attempt:0,} returns sandbox id \"b4e0c6a9969b3550e3a47979bc74a6a030de7250437ef685dd3ed9313f8261f1\"" Oct 2 19:21:48.820498 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount521728021.mount: Deactivated successfully. Oct 2 19:21:49.669210 env[1466]: time="2023-10-02T19:21:49.669155312Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.669794 env[1466]: time="2023-10-02T19:21:49.669782113Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.670990 env[1466]: time="2023-10-02T19:21:49.670976132Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.672457 env[1466]: time="2023-10-02T19:21:49.672443839Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:49.672898 env[1466]: time="2023-10-02T19:21:49.672852006Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:21:49.673309 env[1466]: time="2023-10-02T19:21:49.673258693Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:21:49.674300 env[1466]: time="2023-10-02T19:21:49.674282386Z" level=info msg="CreateContainer within sandbox \"a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:21:49.679643 env[1466]: time="2023-10-02T19:21:49.679598869Z" level=info msg="CreateContainer within sandbox \"a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04\"" Oct 2 19:21:49.679830 env[1466]: time="2023-10-02T19:21:49.679792759Z" level=info msg="StartContainer for \"ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04\"" Oct 2 19:21:49.702372 systemd[1]: Started cri-containerd-ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04.scope. Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3153 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333761633235356633363764336130653038633037386438333963 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit: BPF prog-id=129 op=LOAD Oct 2 19:21:49.710000 audit[3234]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000d9be0 items=0 ppid=3153 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333761633235356633363764336130653038633037386438333963 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit: BPF prog-id=130 op=LOAD Oct 2 19:21:49.710000 audit[3234]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000d9c28 items=0 ppid=3153 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333761633235356633363764336130653038633037386438333963 Oct 2 19:21:49.710000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:21:49.710000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { perfmon } for pid=3234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit[3234]: AVC avc: denied { bpf } for pid=3234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:49.710000 audit: BPF prog-id=131 op=LOAD Oct 2 19:21:49.710000 audit[3234]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000d9cb8 items=0 ppid=3153 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:49.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333761633235356633363764336130653038633037386438333963 Oct 2 19:21:49.729896 env[1466]: time="2023-10-02T19:21:49.729870394Z" level=info msg="StartContainer for \"ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04\" returns successfully" Oct 2 19:21:49.735439 systemd[1]: cri-containerd-ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04.scope: Deactivated successfully. Oct 2 19:21:49.750000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:21:49.764940 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04-rootfs.mount: Deactivated successfully. Oct 2 19:21:50.778640 env[1466]: time="2023-10-02T19:21:50.778434898Z" level=info msg="shim disconnected" id=ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04 Oct 2 19:21:50.778640 env[1466]: time="2023-10-02T19:21:50.778585989Z" level=warning msg="cleaning up after shim disconnected" id=ed37ac255f367d3a0e08c078d839c208b46fe1a89646e37720d356850b863b04 namespace=k8s.io Oct 2 19:21:50.778640 env[1466]: time="2023-10-02T19:21:50.778617751Z" level=info msg="cleaning up dead shim" Oct 2 19:21:50.798499 env[1466]: time="2023-10-02T19:21:50.798452987Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:21:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3279 runtime=io.containerd.runc.v2\n" Oct 2 19:21:51.325401 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount871561639.mount: Deactivated successfully. Oct 2 19:21:52.174924 kubelet[2598]: E1002 19:21:52.174877 2598 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:52.382625 env[1466]: time="2023-10-02T19:21:52.382568692Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:52.383221 env[1466]: time="2023-10-02T19:21:52.383186888Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:52.384460 env[1466]: time="2023-10-02T19:21:52.384419589Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:52.385519 env[1466]: time="2023-10-02T19:21:52.385461178Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:52.386106 env[1466]: time="2023-10-02T19:21:52.386064759Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:21:52.386475 env[1466]: time="2023-10-02T19:21:52.386436524Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:21:52.387395 env[1466]: time="2023-10-02T19:21:52.387377050Z" level=info msg="CreateContainer within sandbox \"b4e0c6a9969b3550e3a47979bc74a6a030de7250437ef685dd3ed9313f8261f1\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:21:52.391987 env[1466]: time="2023-10-02T19:21:52.391949807Z" level=info msg="CreateContainer within sandbox \"b4e0c6a9969b3550e3a47979bc74a6a030de7250437ef685dd3ed9313f8261f1\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"9ce7dc5f6a59ee268f5bf8ac589de8b5ac634ad12880d11b4a7101d791de70fe\"" Oct 2 19:21:52.392294 env[1466]: time="2023-10-02T19:21:52.392235861Z" level=info msg="StartContainer for \"9ce7dc5f6a59ee268f5bf8ac589de8b5ac634ad12880d11b4a7101d791de70fe\"" Oct 2 19:21:52.412465 systemd[1]: Started cri-containerd-9ce7dc5f6a59ee268f5bf8ac589de8b5ac634ad12880d11b4a7101d791de70fe.scope. Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444128 kernel: kauditd_printk_skb: 160 callbacks suppressed Oct 2 19:21:52.444233 kernel: audit: type=1400 audit(1696274512.417:1116): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.566037 kernel: audit: type=1400 audit(1696274512.417:1117): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.566070 kernel: audit: type=1400 audit(1696274512.417:1118): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688954 kernel: audit: type=1400 audit(1696274512.417:1119): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688985 kernel: audit: type=1400 audit(1696274512.417:1120): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.750891 kernel: audit: type=1400 audit(1696274512.417:1121): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.812847 kernel: audit: type=1400 audit(1696274512.417:1122): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.875169 kernel: audit: type=1400 audit(1696274512.417:1123): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.936358 kernel: audit: type=1400 audit(1696274512.417:1124): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.997547 kernel: audit: type=1400 audit(1696274512.443:1125): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.443000 audit: BPF prog-id=132 op=LOAD Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3194 pid=3300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653764633566366135396565323638663562663861633538396465 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3194 pid=3300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653764633566366135396565323638663562663861633538396465 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.444000 audit: BPF prog-id=133 op=LOAD Oct 2 19:21:52.444000 audit[3300]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ae0a0 items=0 ppid=3194 pid=3300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653764633566366135396565323638663562663861633538396465 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.565000 audit: BPF prog-id=134 op=LOAD Oct 2 19:21:52.565000 audit[3300]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ae0e8 items=0 ppid=3194 pid=3300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653764633566366135396565323638663562663861633538396465 Oct 2 19:21:52.688000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:21:52.688000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { perfmon } for pid=3300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit[3300]: AVC avc: denied { bpf } for pid=3300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:52.688000 audit: BPF prog-id=135 op=LOAD Oct 2 19:21:52.688000 audit[3300]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ae4f8 items=0 ppid=3194 pid=3300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:52.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653764633566366135396565323638663562663861633538396465 Oct 2 19:21:53.065343 env[1466]: time="2023-10-02T19:21:53.065285868Z" level=info msg="StartContainer for \"9ce7dc5f6a59ee268f5bf8ac589de8b5ac634ad12880d11b4a7101d791de70fe\" returns successfully" Oct 2 19:21:53.370000 audit[3369]: NETFILTER_CFG table=filter:107 family=2 entries=13 op=nft_register_rule pid=3369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:53.370000 audit[3369]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7fff5a0a5a30 a2=0 a3=7fff5a0a5a1c items=0 ppid=2897 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.370000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:53.372000 audit[3369]: NETFILTER_CFG table=nat:108 family=2 entries=27 op=nft_register_chain pid=3369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:21:53.372000 audit[3369]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7fff5a0a5a30 a2=0 a3=7fff5a0a5a1c items=0 ppid=2897 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:53.372000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:21:53.743148 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount545083657.mount: Deactivated successfully. Oct 2 19:21:55.699604 env[1466]: time="2023-10-02T19:21:55.699574835Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:55.700145 env[1466]: time="2023-10-02T19:21:55.700133183Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:55.700851 env[1466]: time="2023-10-02T19:21:55.700838746Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:55.702140 env[1466]: time="2023-10-02T19:21:55.702100547Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:21:55.702386 env[1466]: time="2023-10-02T19:21:55.702344855Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:21:55.703704 env[1466]: time="2023-10-02T19:21:55.703667733Z" level=info msg="CreateContainer within sandbox \"a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:21:55.708666 env[1466]: time="2023-10-02T19:21:55.708649515Z" level=info msg="CreateContainer within sandbox \"a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c\"" Oct 2 19:21:55.708901 env[1466]: time="2023-10-02T19:21:55.708853249Z" level=info msg="StartContainer for \"84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c\"" Oct 2 19:21:55.731168 systemd[1]: Started cri-containerd-84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c.scope. Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3153 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:55.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663638346264613731363131343765646137633432633930373331 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit: BPF prog-id=136 op=LOAD Oct 2 19:21:55.738000 audit[3378]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000277c70 items=0 ppid=3153 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:55.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663638346264613731363131343765646137633432633930373331 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit: BPF prog-id=137 op=LOAD Oct 2 19:21:55.738000 audit[3378]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000277cb8 items=0 ppid=3153 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:55.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663638346264613731363131343765646137633432633930373331 Oct 2 19:21:55.738000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:21:55.738000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { perfmon } for pid=3378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit[3378]: AVC avc: denied { bpf } for pid=3378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:21:55.738000 audit: BPF prog-id=138 op=LOAD Oct 2 19:21:55.738000 audit[3378]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000277d48 items=0 ppid=3153 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:55.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663638346264613731363131343765646137633432633930373331 Oct 2 19:21:55.759857 env[1466]: time="2023-10-02T19:21:55.759827786Z" level=info msg="StartContainer for \"84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c\" returns successfully" Oct 2 19:21:56.426221 env[1466]: time="2023-10-02T19:21:56.426107905Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:21:56.429631 systemd[1]: cri-containerd-84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c.scope: Deactivated successfully. Oct 2 19:21:56.438000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:21:56.480258 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c-rootfs.mount: Deactivated successfully. Oct 2 19:21:57.094019 env[1466]: time="2023-10-02T19:21:57.093909947Z" level=info msg="shim disconnected" id=84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c Oct 2 19:21:57.095026 env[1466]: time="2023-10-02T19:21:57.094015133Z" level=warning msg="cleaning up after shim disconnected" id=84f684bda7161147eda7c42c907319181c35cb5eb620fcdecdca0dacb102053c namespace=k8s.io Oct 2 19:21:57.095026 env[1466]: time="2023-10-02T19:21:57.094055877Z" level=info msg="cleaning up dead shim" Oct 2 19:21:57.122618 env[1466]: time="2023-10-02T19:21:57.122477757Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:21:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3436 runtime=io.containerd.runc.v2\n" Oct 2 19:21:57.254555 env[1466]: time="2023-10-02T19:21:57.254430099Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:21:58.058795 kubelet[2598]: I1002 19:21:58.058767 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:58.059211 kubelet[2598]: I1002 19:21:58.058993 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:58.059256 kubelet[2598]: I1002 19:21:58.059229 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:58.060588 kubelet[2598]: I1002 19:21:58.060574 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:21:58.062524 systemd[1]: Created slice kubepods-burstable-pod7c5feed4_1050_40b0_91f6_e1955c1da4ca.slice. Oct 2 19:21:58.065243 systemd[1]: Created slice kubepods-burstable-pod8c100c88_f12b_4e0f_9b20_51658738ad0e.slice. Oct 2 19:21:58.068037 systemd[1]: Created slice kubepods-besteffort-podc21fe48d_9432_4776_ac6e_00596130f0b0.slice. Oct 2 19:21:58.070217 systemd[1]: Created slice kubepods-besteffort-pod96f74700_0a9b_4c08_af27_e7ef6b1596f5.slice. Oct 2 19:21:58.257522 kubelet[2598]: I1002 19:21:58.257442 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mddj4\" (UniqueName: \"kubernetes.io/projected/96f74700-0a9b-4c08-af27-e7ef6b1596f5-kube-api-access-mddj4\") pod \"csi-node-driver-f2jvq\" (UID: \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\") " pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.257902 kubelet[2598]: I1002 19:21:58.257680 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z57cb\" (UniqueName: \"kubernetes.io/projected/c21fe48d-9432-4776-ac6e-00596130f0b0-kube-api-access-z57cb\") pod \"calico-kube-controllers-69d9c784fb-4mbvh\" (UID: \"c21fe48d-9432-4776-ac6e-00596130f0b0\") " pod="calico-system/calico-kube-controllers-69d9c784fb-4mbvh" Oct 2 19:21:58.257902 kubelet[2598]: I1002 19:21:58.257802 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/96f74700-0a9b-4c08-af27-e7ef6b1596f5-kubelet-dir\") pod \"csi-node-driver-f2jvq\" (UID: \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\") " pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.257902 kubelet[2598]: I1002 19:21:58.257884 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-79gq7\" (UniqueName: \"kubernetes.io/projected/8c100c88-f12b-4e0f-9b20-51658738ad0e-kube-api-access-79gq7\") pod \"coredns-565d847f94-pfrbq\" (UID: \"8c100c88-f12b-4e0f-9b20-51658738ad0e\") " pod="kube-system/coredns-565d847f94-pfrbq" Oct 2 19:21:58.258582 kubelet[2598]: I1002 19:21:58.258014 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/96f74700-0a9b-4c08-af27-e7ef6b1596f5-varrun\") pod \"csi-node-driver-f2jvq\" (UID: \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\") " pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.258582 kubelet[2598]: I1002 19:21:58.258232 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/96f74700-0a9b-4c08-af27-e7ef6b1596f5-registration-dir\") pod \"csi-node-driver-f2jvq\" (UID: \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\") " pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.258582 kubelet[2598]: I1002 19:21:58.258376 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/96f74700-0a9b-4c08-af27-e7ef6b1596f5-etccalico\") pod \"csi-node-driver-f2jvq\" (UID: \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\") " pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.258582 kubelet[2598]: I1002 19:21:58.258460 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8c100c88-f12b-4e0f-9b20-51658738ad0e-config-volume\") pod \"coredns-565d847f94-pfrbq\" (UID: \"8c100c88-f12b-4e0f-9b20-51658738ad0e\") " pod="kube-system/coredns-565d847f94-pfrbq" Oct 2 19:21:58.258582 kubelet[2598]: I1002 19:21:58.258558 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7c5feed4-1050-40b0-91f6-e1955c1da4ca-config-volume\") pod \"coredns-565d847f94-fzc52\" (UID: \"7c5feed4-1050-40b0-91f6-e1955c1da4ca\") " pod="kube-system/coredns-565d847f94-fzc52" Oct 2 19:21:58.259246 kubelet[2598]: I1002 19:21:58.258642 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-trm79\" (UniqueName: \"kubernetes.io/projected/7c5feed4-1050-40b0-91f6-e1955c1da4ca-kube-api-access-trm79\") pod \"coredns-565d847f94-fzc52\" (UID: \"7c5feed4-1050-40b0-91f6-e1955c1da4ca\") " pod="kube-system/coredns-565d847f94-fzc52" Oct 2 19:21:58.259246 kubelet[2598]: I1002 19:21:58.258779 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/96f74700-0a9b-4c08-af27-e7ef6b1596f5-socket-dir\") pod \"csi-node-driver-f2jvq\" (UID: \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\") " pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.674095 env[1466]: time="2023-10-02T19:21:58.674056157Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-pfrbq,Uid:8c100c88-f12b-4e0f-9b20-51658738ad0e,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:58.674095 env[1466]: time="2023-10-02T19:21:58.674056159Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-4mbvh,Uid:c21fe48d-9432-4776-ac6e-00596130f0b0,Namespace:calico-system,Attempt:0,}" Oct 2 19:21:58.674095 env[1466]: time="2023-10-02T19:21:58.674056169Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f2jvq,Uid:96f74700-0a9b-4c08-af27-e7ef6b1596f5,Namespace:calico-system,Attempt:0,}" Oct 2 19:21:58.674399 env[1466]: time="2023-10-02T19:21:58.674056283Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-fzc52,Uid:7c5feed4-1050-40b0-91f6-e1955c1da4ca,Namespace:kube-system,Attempt:0,}" Oct 2 19:21:58.737057 env[1466]: time="2023-10-02T19:21:58.736960827Z" level=error msg="Failed to destroy network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737057 env[1466]: time="2023-10-02T19:21:58.736983939Z" level=error msg="Failed to destroy network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737265 env[1466]: time="2023-10-02T19:21:58.737248009Z" level=error msg="encountered an error cleaning up failed sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737292 env[1466]: time="2023-10-02T19:21:58.737281421Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-4mbvh,Uid:c21fe48d-9432-4776-ac6e-00596130f0b0,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737349 env[1466]: time="2023-10-02T19:21:58.737280321Z" level=error msg="encountered an error cleaning up failed sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737349 env[1466]: time="2023-10-02T19:21:58.737324088Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f2jvq,Uid:96f74700-0a9b-4c08-af27-e7ef6b1596f5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737499 kubelet[2598]: E1002 19:21:58.737473 2598 remote_runtime.go:222] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737556 kubelet[2598]: E1002 19:21:58.737473 2598 remote_runtime.go:222] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.737579 kubelet[2598]: E1002 19:21:58.737555 2598 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.737579 kubelet[2598]: E1002 19:21:58.737571 2598 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69d9c784fb-4mbvh" Oct 2 19:21:58.737579 kubelet[2598]: E1002 19:21:58.737574 2598 kuberuntime_manager.go:772] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f2jvq" Oct 2 19:21:58.737642 kubelet[2598]: E1002 19:21:58.737586 2598 kuberuntime_manager.go:772] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69d9c784fb-4mbvh" Oct 2 19:21:58.737642 kubelet[2598]: E1002 19:21:58.737619 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:21:58.737642 kubelet[2598]: E1002 19:21:58.737619 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-69d9c784fb-4mbvh_calico-system(c21fe48d-9432-4776-ac6e-00596130f0b0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-69d9c784fb-4mbvh_calico-system(c21fe48d-9432-4776-ac6e-00596130f0b0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69d9c784fb-4mbvh" podUID=c21fe48d-9432-4776-ac6e-00596130f0b0 Oct 2 19:21:58.739289 env[1466]: time="2023-10-02T19:21:58.739259566Z" level=error msg="Failed to destroy network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739564 env[1466]: time="2023-10-02T19:21:58.739496264Z" level=error msg="Failed to destroy network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739604 env[1466]: time="2023-10-02T19:21:58.739568157Z" level=error msg="encountered an error cleaning up failed sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739631 env[1466]: time="2023-10-02T19:21:58.739599827Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-fzc52,Uid:7c5feed4-1050-40b0-91f6-e1955c1da4ca,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739769 kubelet[2598]: E1002 19:21:58.739720 2598 remote_runtime.go:222] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739769 kubelet[2598]: E1002 19:21:58.739769 2598 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-565d847f94-fzc52" Oct 2 19:21:58.739845 kubelet[2598]: E1002 19:21:58.739782 2598 kuberuntime_manager.go:772] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-565d847f94-fzc52" Oct 2 19:21:58.739845 kubelet[2598]: E1002 19:21:58.739820 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-565d847f94-fzc52_kube-system(7c5feed4-1050-40b0-91f6-e1955c1da4ca)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-565d847f94-fzc52_kube-system(7c5feed4-1050-40b0-91f6-e1955c1da4ca)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-565d847f94-fzc52" podUID=7c5feed4-1050-40b0-91f6-e1955c1da4ca Oct 2 19:21:58.739941 env[1466]: time="2023-10-02T19:21:58.739808868Z" level=error msg="encountered an error cleaning up failed sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739941 env[1466]: time="2023-10-02T19:21:58.739833568Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-pfrbq,Uid:8c100c88-f12b-4e0f-9b20-51658738ad0e,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739984 kubelet[2598]: E1002 19:21:58.739937 2598 remote_runtime.go:222] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:58.739984 kubelet[2598]: E1002 19:21:58.739955 2598 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-565d847f94-pfrbq" Oct 2 19:21:58.739984 kubelet[2598]: E1002 19:21:58.739967 2598 kuberuntime_manager.go:772] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-565d847f94-pfrbq" Oct 2 19:21:58.740062 kubelet[2598]: E1002 19:21:58.739987 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-565d847f94-pfrbq_kube-system(8c100c88-f12b-4e0f-9b20-51658738ad0e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-565d847f94-pfrbq_kube-system(8c100c88-f12b-4e0f-9b20-51658738ad0e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-565d847f94-pfrbq" podUID=8c100c88-f12b-4e0f-9b20-51658738ad0e Oct 2 19:21:59.256789 kubelet[2598]: I1002 19:21:59.256771 2598 pod_container_deletor.go:79] "Container not found in pod's containers" containerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:21:59.257341 env[1466]: time="2023-10-02T19:21:59.257317280Z" level=info msg="StopPodSandbox for \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\"" Oct 2 19:21:59.257387 kubelet[2598]: I1002 19:21:59.257381 2598 pod_container_deletor.go:79] "Container not found in pod's containers" containerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:21:59.257628 env[1466]: time="2023-10-02T19:21:59.257594701Z" level=info msg="StopPodSandbox for \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\"" Oct 2 19:21:59.257920 kubelet[2598]: I1002 19:21:59.257911 2598 pod_container_deletor.go:79] "Container not found in pod's containers" containerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:21:59.258213 env[1466]: time="2023-10-02T19:21:59.258194908Z" level=info msg="StopPodSandbox for \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\"" Oct 2 19:21:59.258390 kubelet[2598]: I1002 19:21:59.258382 2598 pod_container_deletor.go:79] "Container not found in pod's containers" containerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:21:59.258643 env[1466]: time="2023-10-02T19:21:59.258625986Z" level=info msg="StopPodSandbox for \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\"" Oct 2 19:21:59.274541 env[1466]: time="2023-10-02T19:21:59.274480725Z" level=error msg="StopPodSandbox for \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\" failed" error="failed to destroy network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:59.274700 env[1466]: time="2023-10-02T19:21:59.274526520Z" level=error msg="StopPodSandbox for \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\" failed" error="failed to destroy network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:59.274861 kubelet[2598]: E1002 19:21:59.274800 2598 remote_runtime.go:269] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:21:59.274952 kubelet[2598]: E1002 19:21:59.274901 2598 kuberuntime_manager.go:954] "Failed to stop sandbox" podSandboxID={Type:containerd ID:c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2} Oct 2 19:21:59.274952 kubelet[2598]: E1002 19:21:59.274800 2598 remote_runtime.go:269] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:21:59.274952 kubelet[2598]: E1002 19:21:59.274942 2598 kuberuntime_manager.go:695] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7c5feed4-1050-40b0-91f6-e1955c1da4ca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:21:59.274952 kubelet[2598]: E1002 19:21:59.274946 2598 kuberuntime_manager.go:954] "Failed to stop sandbox" podSandboxID={Type:containerd ID:bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc} Oct 2 19:21:59.275121 kubelet[2598]: E1002 19:21:59.274977 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7c5feed4-1050-40b0-91f6-e1955c1da4ca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-565d847f94-fzc52" podUID=7c5feed4-1050-40b0-91f6-e1955c1da4ca Oct 2 19:21:59.275121 kubelet[2598]: E1002 19:21:59.274983 2598 kuberuntime_manager.go:695] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c21fe48d-9432-4776-ac6e-00596130f0b0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:21:59.275121 kubelet[2598]: E1002 19:21:59.274997 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c21fe48d-9432-4776-ac6e-00596130f0b0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69d9c784fb-4mbvh" podUID=c21fe48d-9432-4776-ac6e-00596130f0b0 Oct 2 19:21:59.275283 env[1466]: time="2023-10-02T19:21:59.275256191Z" level=error msg="StopPodSandbox for \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\" failed" error="failed to destroy network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:59.275359 kubelet[2598]: E1002 19:21:59.275352 2598 remote_runtime.go:269] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:21:59.275386 kubelet[2598]: E1002 19:21:59.275365 2598 kuberuntime_manager.go:954] "Failed to stop sandbox" podSandboxID={Type:containerd ID:0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0} Oct 2 19:21:59.275386 kubelet[2598]: E1002 19:21:59.275382 2598 kuberuntime_manager.go:695] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8c100c88-f12b-4e0f-9b20-51658738ad0e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:21:59.275435 kubelet[2598]: E1002 19:21:59.275397 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8c100c88-f12b-4e0f-9b20-51658738ad0e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-565d847f94-pfrbq" podUID=8c100c88-f12b-4e0f-9b20-51658738ad0e Oct 2 19:21:59.276224 env[1466]: time="2023-10-02T19:21:59.276208142Z" level=error msg="StopPodSandbox for \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\" failed" error="failed to destroy network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:21:59.276325 kubelet[2598]: E1002 19:21:59.276318 2598 remote_runtime.go:269] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:21:59.276352 kubelet[2598]: E1002 19:21:59.276332 2598 kuberuntime_manager.go:954] "Failed to stop sandbox" podSandboxID={Type:containerd ID:40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34} Oct 2 19:21:59.276352 kubelet[2598]: E1002 19:21:59.276349 2598 kuberuntime_manager.go:695] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:21:59.276402 kubelet[2598]: E1002 19:21:59.276363 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"96f74700-0a9b-4c08-af27-e7ef6b1596f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:21:59.376079 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc-shm.mount: Deactivated successfully. Oct 2 19:21:59.376149 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34-shm.mount: Deactivated successfully. Oct 2 19:22:00.702328 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount408128920.mount: Deactivated successfully. Oct 2 19:22:00.725332 env[1466]: time="2023-10-02T19:22:00.725285949Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:00.725944 env[1466]: time="2023-10-02T19:22:00.725903521Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:00.726679 env[1466]: time="2023-10-02T19:22:00.726633814Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:00.727380 env[1466]: time="2023-10-02T19:22:00.727343704Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:00.727648 env[1466]: time="2023-10-02T19:22:00.727604938Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:22:00.728950 env[1466]: time="2023-10-02T19:22:00.728908156Z" level=info msg="CreateContainer within sandbox \"a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:22:00.734657 env[1466]: time="2023-10-02T19:22:00.734638350Z" level=info msg="CreateContainer within sandbox \"a11c6b66999e2505a1ddfb63ca32ba68606dc60877fdc368dd28a0847d4023dc\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"88a4f7d67b3df2600abf8070b627102e0d38ca548ffa62f02931d9b450b50961\"" Oct 2 19:22:00.734848 env[1466]: time="2023-10-02T19:22:00.734834834Z" level=info msg="StartContainer for \"88a4f7d67b3df2600abf8070b627102e0d38ca548ffa62f02931d9b450b50961\"" Oct 2 19:22:00.735002 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3773120684.mount: Deactivated successfully. Oct 2 19:22:00.758618 systemd[1]: Started cri-containerd-88a4f7d67b3df2600abf8070b627102e0d38ca548ffa62f02931d9b450b50961.scope. Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.795642 kernel: kauditd_printk_skb: 97 callbacks suppressed Oct 2 19:22:00.795735 kernel: audit: type=1400 audit(1696274520.767:1143): avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3153 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:00.956933 kernel: audit: type=1300 audit(1696274520.767:1143): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3153 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:00.956966 kernel: audit: type=1327 audit(1696274520.767:1143): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613466376436376233646632363030616266383037306236323731 Oct 2 19:22:00.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613466376436376233646632363030616266383037306236323731 Oct 2 19:22:01.051081 kernel: audit: type=1400 audit(1696274520.767:1144): avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.115174 kernel: audit: type=1400 audit(1696274520.767:1144): avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.179231 kernel: audit: type=1400 audit(1696274520.767:1144): avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.243390 kernel: audit: type=1400 audit(1696274520.767:1144): avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.307839 kernel: audit: type=1400 audit(1696274520.767:1144): avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.372299 kernel: audit: type=1400 audit(1696274520.767:1144): avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.375344 env[1466]: time="2023-10-02T19:22:01.375322143Z" level=info msg="StartContainer for \"88a4f7d67b3df2600abf8070b627102e0d38ca548ffa62f02931d9b450b50961\" returns successfully" Oct 2 19:22:01.436966 kernel: audit: type=1400 audit(1696274520.767:1144): avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.767000 audit: BPF prog-id=139 op=LOAD Oct 2 19:22:00.767000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002efc70 items=0 ppid=3153 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:00.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613466376436376233646632363030616266383037306236323731 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:00.859000 audit: BPF prog-id=140 op=LOAD Oct 2 19:22:00.859000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002efcb8 items=0 ppid=3153 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:00.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613466376436376233646632363030616266383037306236323731 Oct 2 19:22:01.050000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:22:01.050000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { perfmon } for pid=3770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit[3770]: AVC avc: denied { bpf } for pid=3770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:01.050000 audit: BPF prog-id=141 op=LOAD Oct 2 19:22:01.050000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002efd48 items=0 ppid=3153 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:01.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613466376436376233646632363030616266383037306236323731 Oct 2 19:22:01.585787 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:22:01.585821 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:22:02.772000 audit[3909]: AVC avc: denied { write } for pid=3909 comm="tee" name="fd" dev="proc" ino=32974 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:02.772000 audit[3909]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd2d1fc96d a2=241 a3=1b6 items=1 ppid=3883 pid=3909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.772000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:22:02.772000 audit: PATH item=0 name="/dev/fd/63" inode=30493 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:02.772000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:02.773000 audit[3914]: AVC avc: denied { write } for pid=3914 comm="tee" name="fd" dev="proc" ino=18386 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:02.773000 audit[3914]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe8431495e a2=241 a3=1b6 items=1 ppid=3877 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.773000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:22:02.773000 audit[3915]: AVC avc: denied { write } for pid=3915 comm="tee" name="fd" dev="proc" ino=34064 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:02.773000 audit: PATH item=0 name="/dev/fd/63" inode=18383 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:02.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:02.773000 audit[3915]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd8c55d95d a2=241 a3=1b6 items=1 ppid=3878 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.773000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:22:02.773000 audit: PATH item=0 name="/dev/fd/63" inode=34061 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:02.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:02.773000 audit[3922]: AVC avc: denied { write } for pid=3922 comm="tee" name="fd" dev="proc" ino=9035 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:02.773000 audit[3922]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeba48996f a2=241 a3=1b6 items=1 ppid=3879 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.773000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:22:02.773000 audit: PATH item=0 name="/dev/fd/63" inode=26393 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:02.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:02.773000 audit[3925]: AVC avc: denied { write } for pid=3925 comm="tee" name="fd" dev="proc" ino=32061 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:02.773000 audit[3925]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd103ba96d a2=241 a3=1b6 items=1 ppid=3882 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.773000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:22:02.773000 audit: PATH item=0 name="/dev/fd/63" inode=22397 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:02.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:02.773000 audit[3919]: AVC avc: denied { write } for pid=3919 comm="tee" name="fd" dev="proc" ino=28635 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:02.773000 audit[3919]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc695b096d a2=241 a3=1b6 items=1 ppid=3881 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.773000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:22:02.773000 audit: PATH item=0 name="/dev/fd/63" inode=32058 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:02.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:02.775000 audit[3921]: AVC avc: denied { write } for pid=3921 comm="tee" name="fd" dev="proc" ino=18390 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:22:02.775000 audit[3921]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd6ea7696e a2=241 a3=1b6 items=1 ppid=3880 pid=3921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.775000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:22:02.775000 audit: PATH item=0 name="/dev/fd/63" inode=30494 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:22:02.775000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit: BPF prog-id=142 op=LOAD Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff2a995930 a2=70 a3=7f9283cba000 items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.870000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit: BPF prog-id=143 op=LOAD Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff2a995930 a2=70 a3=6e items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.870000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff2a9958e0 a2=70 a3=7fff2a995930 items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit: BPF prog-id=144 op=LOAD Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff2a9958c0 a2=70 a3=7fff2a995930 items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.870000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff2a9959a0 a2=70 a3=0 items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff2a995990 a2=70 a3=0 items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff2a9959d0 a2=70 a3=0 items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.870000 audit: BPF prog-id=145 op=LOAD Oct 2 19:22:02.870000 audit[4060]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff2a9958f0 a2=70 a3=ffffffff items=0 ppid=3888 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:22:02.871000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.871000 audit[4064]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd666da6c0 a2=70 a3=fff80800 items=0 ppid=3888 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:22:02.872000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:02.872000 audit[4064]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd666da590 a2=70 a3=3 items=0 ppid=3888 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.872000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:22:02.888000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:22:02.985000 audit[4120]: NETFILTER_CFG table=mangle:109 family=2 entries=19 op=nft_register_chain pid=4120 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:02.985000 audit[4120]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffd5be03c30 a2=0 a3=7ffd5be03c1c items=0 ppid=3888 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.985000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:02.992000 audit[4119]: NETFILTER_CFG table=raw:110 family=2 entries=19 op=nft_register_chain pid=4119 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:02.992000 audit[4119]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffd81a7e0f0 a2=0 a3=55ded0401000 items=0 ppid=3888 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.992000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:02.996000 audit[4121]: NETFILTER_CFG table=nat:111 family=2 entries=16 op=nft_register_chain pid=4121 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:02.996000 audit[4121]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7fff90fec8e0 a2=0 a3=561a24c96000 items=0 ppid=3888 pid=4121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:02.996000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:03.004000 audit[4124]: NETFILTER_CFG table=filter:112 family=2 entries=39 op=nft_register_chain pid=4124 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:03.004000 audit[4124]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffe9efdd320 a2=0 a3=556cb55bb000 items=0 ppid=3888 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:03.004000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:03.866532 systemd-networkd[1349]: vxlan.calico: Link UP Oct 2 19:22:03.866550 systemd-networkd[1349]: vxlan.calico: Gained carrier Oct 2 19:22:05.330127 systemd-networkd[1349]: vxlan.calico: Gained IPv6LL Oct 2 19:22:10.169357 env[1466]: time="2023-10-02T19:22:10.169206784Z" level=info msg="StopPodSandbox for \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\"" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.236 [INFO][4234] k8s.go 576: Cleaning up netns ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.237 [INFO][4234] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" iface="eth0" netns="/var/run/netns/cni-3fe2d44e-e35c-513e-a87c-d388b30510d1" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.237 [INFO][4234] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" iface="eth0" netns="/var/run/netns/cni-3fe2d44e-e35c-513e-a87c-d388b30510d1" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.237 [INFO][4234] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" iface="eth0" netns="/var/run/netns/cni-3fe2d44e-e35c-513e-a87c-d388b30510d1" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.237 [INFO][4234] k8s.go 583: Releasing IP address(es) ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.237 [INFO][4234] utils.go 196: Calico CNI releasing IP address ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.249 [INFO][4248] ipam_plugin.go 416: Releasing address using handleID ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.257126 env[1466]: time="2023-10-02T19:22:10Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:10.257126 env[1466]: time="2023-10-02T19:22:10Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.254 [WARNING][4248] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.254 [INFO][4248] ipam_plugin.go 444: Releasing address using workloadID ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.257126 env[1466]: time="2023-10-02T19:22:10Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:10.257126 env[1466]: 2023-10-02 19:22:10.256 [INFO][4234] k8s.go 589: Teardown processing complete. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:10.257519 env[1466]: time="2023-10-02T19:22:10.257201117Z" level=info msg="TearDown network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\" successfully" Oct 2 19:22:10.257519 env[1466]: time="2023-10-02T19:22:10.257229750Z" level=info msg="StopPodSandbox for \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\" returns successfully" Oct 2 19:22:10.257673 env[1466]: time="2023-10-02T19:22:10.257657773Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f2jvq,Uid:96f74700-0a9b-4c08-af27-e7ef6b1596f5,Namespace:calico-system,Attempt:1,}" Oct 2 19:22:10.258274 systemd[1]: run-netns-cni\x2d3fe2d44e\x2de35c\x2d513e\x2da87c\x2dd388b30510d1.mount: Deactivated successfully. Oct 2 19:22:10.434566 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:22:10.434646 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7cb39cce713: link becomes ready Oct 2 19:22:10.456663 systemd-networkd[1349]: cali7cb39cce713: Link UP Oct 2 19:22:10.456675 systemd-networkd[1349]: cali7cb39cce713: Gained carrier Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.279 [INFO][4266] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0 csi-node-driver- calico-system 96f74700-0a9b-4c08-af27-e7ef6b1596f5 647 0 2023-10-02 19:21:58 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:fd56fb8dc k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510.3.0-a-a82eb4d27c csi-node-driver-f2jvq eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali7cb39cce713 [] []}} ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.279 [INFO][4266] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.296 [INFO][4287] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" HandleID="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.306 [INFO][4287] ipam_plugin.go 269: Auto assigning IP ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" HandleID="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000125830), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.0-a-a82eb4d27c", "pod":"csi-node-driver-f2jvq", "timestamp":"2023-10-02 19:22:10.296322101 +0000 UTC"}, Hostname:"ci-3510.3.0-a-a82eb4d27c", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:10.471727 env[1466]: time="2023-10-02T19:22:10Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:10.471727 env[1466]: time="2023-10-02T19:22:10Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.307 [INFO][4287] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-a82eb4d27c' Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.311 [INFO][4287] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.320 [INFO][4287] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.328 [INFO][4287] ipam.go 489: Trying affinity for 192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.333 [INFO][4287] ipam.go 155: Attempting to load block cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.338 [INFO][4287] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.338 [INFO][4287] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.27.0/26 handle="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.341 [INFO][4287] ipam.go 1682: Creating new handle: k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290 Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.347 [INFO][4287] ipam.go 1203: Writing block in order to claim IPs block=192.168.27.0/26 handle="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.357 [INFO][4287] ipam.go 1216: Successfully claimed IPs: [192.168.27.1/26] block=192.168.27.0/26 handle="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.357 [INFO][4287] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.27.1/26] handle="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:10.471727 env[1466]: time="2023-10-02T19:22:10Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:10.471727 env[1466]: 2023-10-02 19:22:10.357 [INFO][4287] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.27.1/26] IPv6=[] ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" HandleID="k8s-pod-network.7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.473445 env[1466]: 2023-10-02 19:22:10.363 [INFO][4266] k8s.go 383: Populated endpoint ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96f74700-0a9b-4c08-af27-e7ef6b1596f5", ResourceVersion:"647", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"", Pod:"csi-node-driver-f2jvq", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.27.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7cb39cce713", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:10.473445 env[1466]: 2023-10-02 19:22:10.364 [INFO][4266] k8s.go 384: Calico CNI using IPs: [192.168.27.1/32] ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.473445 env[1466]: 2023-10-02 19:22:10.364 [INFO][4266] dataplane_linux.go 68: Setting the host side veth name to cali7cb39cce713 ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.473445 env[1466]: 2023-10-02 19:22:10.434 [INFO][4266] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.473445 env[1466]: 2023-10-02 19:22:10.456 [INFO][4266] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96f74700-0a9b-4c08-af27-e7ef6b1596f5", ResourceVersion:"647", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290", Pod:"csi-node-driver-f2jvq", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.27.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7cb39cce713", MAC:"ee:79:ae:bb:a9:d9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:10.473445 env[1466]: 2023-10-02 19:22:10.468 [INFO][4266] k8s.go 489: Wrote updated endpoint to datastore ContainerID="7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290" Namespace="calico-system" Pod="csi-node-driver-f2jvq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:10.491011 env[1466]: time="2023-10-02T19:22:10.490854908Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:10.491011 env[1466]: time="2023-10-02T19:22:10.490924695Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:10.491011 env[1466]: time="2023-10-02T19:22:10.490951511Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:10.491573 env[1466]: time="2023-10-02T19:22:10.491243747Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290 pid=4329 runtime=io.containerd.runc.v2 Oct 2 19:22:10.498000 audit[4339]: NETFILTER_CFG table=filter:113 family=2 entries=36 op=nft_register_chain pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:10.527549 kernel: kauditd_printk_skb: 151 callbacks suppressed Oct 2 19:22:10.527616 kernel: audit: type=1325 audit(1696274530.498:1174): table=filter:113 family=2 entries=36 op=nft_register_chain pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:10.498000 audit[4339]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffd75a1f640 a2=0 a3=7ffd75a1f62c items=0 ppid=3888 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.589697 systemd[1]: Started cri-containerd-7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290.scope. Oct 2 19:22:10.682484 kernel: audit: type=1300 audit(1696274530.498:1174): arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffd75a1f640 a2=0 a3=7ffd75a1f62c items=0 ppid=3888 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.682531 kernel: audit: type=1327 audit(1696274530.498:1174): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:10.498000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:10.743562 kernel: audit: type=1400 audit(1696274530.689:1175): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806279 kernel: audit: type=1400 audit(1696274530.689:1176): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.868989 kernel: audit: type=1400 audit(1696274530.689:1177): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994774 kernel: audit: type=1400 audit(1696274530.689:1178): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994879 kernel: audit: type=1400 audit(1696274530.689:1179): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.057984 kernel: audit: type=1400 audit(1696274530.689:1180): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.121055 kernel: audit: type=1400 audit(1696274530.689:1181): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.168082 env[1466]: time="2023-10-02T19:22:11.168017326Z" level=info msg="StopPodSandbox for \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\"" Oct 2 19:22:11.168082 env[1466]: time="2023-10-02T19:22:11.168017316Z" level=info msg="StopPodSandbox for \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\"" Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.805000 audit: BPF prog-id=146 op=LOAD Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4329 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763313963613265356636656436623962336363346339636136313363 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4329 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763313963613265356636656436623962336363346339636136313363 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.806000 audit: BPF prog-id=147 op=LOAD Oct 2 19:22:10.806000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000187920 items=0 ppid=4329 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763313963613265356636656436623962336363346339636136313363 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.931000 audit: BPF prog-id=148 op=LOAD Oct 2 19:22:10.931000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000187968 items=0 ppid=4329 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763313963613265356636656436623962336363346339636136313363 Oct 2 19:22:10.994000 audit: BPF prog-id=148 op=UNLOAD Oct 2 19:22:10.994000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:10.994000 audit: BPF prog-id=149 op=LOAD Oct 2 19:22:10.994000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000187d78 items=0 ppid=4329 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763313963613265356636656436623962336363346339636136313363 Oct 2 19:22:11.202783 env[1466]: time="2023-10-02T19:22:11.202722455Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f2jvq,Uid:96f74700-0a9b-4c08-af27-e7ef6b1596f5,Namespace:calico-system,Attempt:1,} returns sandbox id \"7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290\"" Oct 2 19:22:11.203614 env[1466]: time="2023-10-02T19:22:11.203599478Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.191 [INFO][4392] k8s.go 576: Cleaning up netns ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.191 [INFO][4392] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" iface="eth0" netns="/var/run/netns/cni-439dca89-c2fa-fc44-d2d9-780ca4d60821" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.192 [INFO][4392] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" iface="eth0" netns="/var/run/netns/cni-439dca89-c2fa-fc44-d2d9-780ca4d60821" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.192 [INFO][4392] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" iface="eth0" netns="/var/run/netns/cni-439dca89-c2fa-fc44-d2d9-780ca4d60821" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.192 [INFO][4392] k8s.go 583: Releasing IP address(es) ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.192 [INFO][4392] utils.go 196: Calico CNI releasing IP address ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.202 [INFO][4428] ipam_plugin.go 416: Releasing address using handleID ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.209461 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:11.209461 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.207 [WARNING][4428] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.207 [INFO][4428] ipam_plugin.go 444: Releasing address using workloadID ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.209461 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:11.209461 env[1466]: 2023-10-02 19:22:11.208 [INFO][4392] k8s.go 589: Teardown processing complete. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:11.209738 env[1466]: time="2023-10-02T19:22:11.209534965Z" level=info msg="TearDown network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\" successfully" Oct 2 19:22:11.209738 env[1466]: time="2023-10-02T19:22:11.209549874Z" level=info msg="StopPodSandbox for \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\" returns successfully" Oct 2 19:22:11.209833 env[1466]: time="2023-10-02T19:22:11.209820624Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-4mbvh,Uid:c21fe48d-9432-4776-ac6e-00596130f0b0,Namespace:calico-system,Attempt:1,}" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.192 [INFO][4393] k8s.go 576: Cleaning up netns ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.192 [INFO][4393] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" iface="eth0" netns="/var/run/netns/cni-def6e710-9e49-0f02-0f13-95955882932d" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.192 [INFO][4393] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" iface="eth0" netns="/var/run/netns/cni-def6e710-9e49-0f02-0f13-95955882932d" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.192 [INFO][4393] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" iface="eth0" netns="/var/run/netns/cni-def6e710-9e49-0f02-0f13-95955882932d" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.192 [INFO][4393] k8s.go 583: Releasing IP address(es) ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.192 [INFO][4393] utils.go 196: Calico CNI releasing IP address ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.202 [INFO][4429] ipam_plugin.go 416: Releasing address using handleID ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.214225 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:11.214225 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.211 [WARNING][4429] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.211 [INFO][4429] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.214225 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:11.214225 env[1466]: 2023-10-02 19:22:11.213 [INFO][4393] k8s.go 589: Teardown processing complete. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:11.214520 env[1466]: time="2023-10-02T19:22:11.214287086Z" level=info msg="TearDown network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\" successfully" Oct 2 19:22:11.214520 env[1466]: time="2023-10-02T19:22:11.214303515Z" level=info msg="StopPodSandbox for \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\" returns successfully" Oct 2 19:22:11.214718 env[1466]: time="2023-10-02T19:22:11.214674766Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-pfrbq,Uid:8c100c88-f12b-4e0f-9b20-51658738ad0e,Namespace:kube-system,Attempt:1,}" Oct 2 19:22:11.259447 systemd[1]: run-netns-cni\x2ddef6e710\x2d9e49\x2d0f02\x2d0f13\x2d95955882932d.mount: Deactivated successfully. Oct 2 19:22:11.259499 systemd[1]: run-netns-cni\x2d439dca89\x2dc2fa\x2dfc44\x2dd2d9\x2d780ca4d60821.mount: Deactivated successfully. Oct 2 19:22:11.299655 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib1df00b13f2: link becomes ready Oct 2 19:22:11.327040 systemd-networkd[1349]: calib1df00b13f2: Link UP Oct 2 19:22:11.327043 systemd-networkd[1349]: calib1df00b13f2: Gained carrier Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.232 [INFO][4457] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0 calico-kube-controllers-69d9c784fb- calico-system c21fe48d-9432-4776-ac6e-00596130f0b0 655 0 2023-10-02 19:21:46 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69d9c784fb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.0-a-a82eb4d27c calico-kube-controllers-69d9c784fb-4mbvh eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calib1df00b13f2 [] []}} ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.232 [INFO][4457] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.246 [INFO][4500] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" HandleID="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.253 [INFO][4500] ipam_plugin.go 269: Auto assigning IP ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" HandleID="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000727bd0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.0-a-a82eb4d27c", "pod":"calico-kube-controllers-69d9c784fb-4mbvh", "timestamp":"2023-10-02 19:22:11.246338464 +0000 UTC"}, Hostname:"ci-3510.3.0-a-a82eb4d27c", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:11.332183 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:11.332183 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.253 [INFO][4500] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-a82eb4d27c' Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.254 [INFO][4500] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.257 [INFO][4500] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.259 [INFO][4500] ipam.go 489: Trying affinity for 192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.261 [INFO][4500] ipam.go 155: Attempting to load block cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.262 [INFO][4500] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.262 [INFO][4500] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.27.0/26 handle="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.263 [INFO][4500] ipam.go 1682: Creating new handle: k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7 Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.265 [INFO][4500] ipam.go 1203: Writing block in order to claim IPs block=192.168.27.0/26 handle="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.268 [INFO][4500] ipam.go 1216: Successfully claimed IPs: [192.168.27.2/26] block=192.168.27.0/26 handle="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.268 [INFO][4500] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.27.2/26] handle="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.332183 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:11.332183 env[1466]: 2023-10-02 19:22:11.268 [INFO][4500] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.27.2/26] IPv6=[] ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" HandleID="k8s-pod-network.fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.332657 env[1466]: 2023-10-02 19:22:11.269 [INFO][4457] k8s.go 383: Populated endpoint ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"c21fe48d-9432-4776-ac6e-00596130f0b0", ResourceVersion:"655", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"", Pod:"calico-kube-controllers-69d9c784fb-4mbvh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.27.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1df00b13f2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:11.332657 env[1466]: 2023-10-02 19:22:11.269 [INFO][4457] k8s.go 384: Calico CNI using IPs: [192.168.27.2/32] ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.332657 env[1466]: 2023-10-02 19:22:11.269 [INFO][4457] dataplane_linux.go 68: Setting the host side veth name to calib1df00b13f2 ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.332657 env[1466]: 2023-10-02 19:22:11.299 [INFO][4457] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.332657 env[1466]: 2023-10-02 19:22:11.327 [INFO][4457] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"c21fe48d-9432-4776-ac6e-00596130f0b0", ResourceVersion:"655", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7", Pod:"calico-kube-controllers-69d9c784fb-4mbvh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.27.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1df00b13f2", MAC:"9a:bb:d2:9e:18:f0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:11.332657 env[1466]: 2023-10-02 19:22:11.331 [INFO][4457] k8s.go 489: Wrote updated endpoint to datastore ContainerID="fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-4mbvh" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:11.337862 env[1466]: time="2023-10-02T19:22:11.337825085Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:11.337862 env[1466]: time="2023-10-02T19:22:11.337849028Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:11.337862 env[1466]: time="2023-10-02T19:22:11.337859824Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:11.338009 env[1466]: time="2023-10-02T19:22:11.337926716Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7 pid=4562 runtime=io.containerd.runc.v2 Oct 2 19:22:11.339000 audit[4572]: NETFILTER_CFG table=filter:114 family=2 entries=34 op=nft_register_chain pid=4572 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:11.339000 audit[4572]: SYSCALL arch=c000003e syscall=46 success=yes exit=18320 a0=3 a1=7ffe37042850 a2=0 a3=7ffe3704283c items=0 ppid=3888 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.339000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:11.355518 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic87eef92a9b: link becomes ready Oct 2 19:22:11.357054 systemd[1]: Started cri-containerd-fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7.scope. Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.362000 audit: BPF prog-id=150 op=LOAD Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4562 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661393738366266653338333765333433616532336130376166313333 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4562 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661393738366266653338333765333433616532336130376166313333 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit: BPF prog-id=151 op=LOAD Oct 2 19:22:11.363000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000097120 items=0 ppid=4562 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661393738366266653338333765333433616532336130376166313333 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit: BPF prog-id=152 op=LOAD Oct 2 19:22:11.363000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000097168 items=0 ppid=4562 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661393738366266653338333765333433616532336130376166313333 Oct 2 19:22:11.363000 audit: BPF prog-id=152 op=UNLOAD Oct 2 19:22:11.363000 audit: BPF prog-id=151 op=UNLOAD Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.363000 audit: BPF prog-id=153 op=LOAD Oct 2 19:22:11.363000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000097578 items=0 ppid=4562 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661393738366266653338333765333433616532336130376166313333 Oct 2 19:22:11.380094 systemd-networkd[1349]: calic87eef92a9b: Link UP Oct 2 19:22:11.381038 env[1466]: time="2023-10-02T19:22:11.381014438Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-4mbvh,Uid:c21fe48d-9432-4776-ac6e-00596130f0b0,Namespace:calico-system,Attempt:1,} returns sandbox id \"fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7\"" Oct 2 19:22:11.407706 systemd-networkd[1349]: calic87eef92a9b: Gained carrier Oct 2 19:22:11.408493 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic87eef92a9b: link becomes ready Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.235 [INFO][4469] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0 coredns-565d847f94- kube-system 8c100c88-f12b-4e0f-9b20-51658738ad0e 656 0 2023-10-02 19:21:41 +0000 UTC map[k8s-app:kube-dns pod-template-hash:565d847f94 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.0-a-a82eb4d27c coredns-565d847f94-pfrbq eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic87eef92a9b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.235 [INFO][4469] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.249 [INFO][4511] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" HandleID="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.254 [INFO][4511] ipam_plugin.go 269: Auto assigning IP ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" HandleID="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00059b110), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.0-a-a82eb4d27c", "pod":"coredns-565d847f94-pfrbq", "timestamp":"2023-10-02 19:22:11.24901221 +0000 UTC"}, Hostname:"ci-3510.3.0-a-a82eb4d27c", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:11.413652 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:11.413652 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.268 [INFO][4511] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-a82eb4d27c' Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.270 [INFO][4511] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.273 [INFO][4511] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.275 [INFO][4511] ipam.go 489: Trying affinity for 192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.276 [INFO][4511] ipam.go 155: Attempting to load block cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.278 [INFO][4511] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.278 [INFO][4511] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.27.0/26 handle="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.279 [INFO][4511] ipam.go 1682: Creating new handle: k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15 Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.282 [INFO][4511] ipam.go 1203: Writing block in order to claim IPs block=192.168.27.0/26 handle="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.284 [INFO][4511] ipam.go 1216: Successfully claimed IPs: [192.168.27.3/26] block=192.168.27.0/26 handle="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.284 [INFO][4511] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.27.3/26] handle="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:11.413652 env[1466]: time="2023-10-02T19:22:11Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:11.413652 env[1466]: 2023-10-02 19:22:11.284 [INFO][4511] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.27.3/26] IPv6=[] ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" HandleID="k8s-pod-network.38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.414110 env[1466]: 2023-10-02 19:22:11.285 [INFO][4469] k8s.go 383: Populated endpoint ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"8c100c88-f12b-4e0f-9b20-51658738ad0e", ResourceVersion:"656", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"", Pod:"coredns-565d847f94-pfrbq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic87eef92a9b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:11.414110 env[1466]: 2023-10-02 19:22:11.285 [INFO][4469] k8s.go 384: Calico CNI using IPs: [192.168.27.3/32] ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.414110 env[1466]: 2023-10-02 19:22:11.285 [INFO][4469] dataplane_linux.go 68: Setting the host side veth name to calic87eef92a9b ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.414110 env[1466]: 2023-10-02 19:22:11.355 [INFO][4469] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.414110 env[1466]: 2023-10-02 19:22:11.407 [INFO][4469] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"8c100c88-f12b-4e0f-9b20-51658738ad0e", ResourceVersion:"656", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15", Pod:"coredns-565d847f94-pfrbq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic87eef92a9b", MAC:"fa:29:51:b4:22:40", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:11.414110 env[1466]: 2023-10-02 19:22:11.412 [INFO][4469] k8s.go 489: Wrote updated endpoint to datastore ContainerID="38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15" Namespace="kube-system" Pod="coredns-565d847f94-pfrbq" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:11.419441 env[1466]: time="2023-10-02T19:22:11.419405775Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:11.419441 env[1466]: time="2023-10-02T19:22:11.419429358Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:11.419441 env[1466]: time="2023-10-02T19:22:11.419436420Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:11.419598 env[1466]: time="2023-10-02T19:22:11.419512224Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15 pid=4617 runtime=io.containerd.runc.v2 Oct 2 19:22:11.420000 audit[4622]: NETFILTER_CFG table=filter:115 family=2 entries=44 op=nft_register_chain pid=4622 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:11.420000 audit[4622]: SYSCALL arch=c000003e syscall=46 success=yes exit=22284 a0=3 a1=7ffc5d5d1220 a2=0 a3=7ffc5d5d120c items=0 ppid=3888 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.420000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:11.445728 env[1466]: time="2023-10-02T19:22:11.445596269Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:11.446564 env[1466]: time="2023-10-02T19:22:11.446419958Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:11.446942 kubelet[2598]: E1002 19:22:11.446895 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:11.447818 kubelet[2598]: E1002 19:22:11.446999 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:11.447968 env[1466]: time="2023-10-02T19:22:11.447692057Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:22:11.448092 kubelet[2598]: E1002 19:22:11.447459 2598 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:11.451574 systemd[1]: Started cri-containerd-38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15.scope. Oct 2 19:22:11.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.473000 audit: BPF prog-id=154 op=LOAD Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4617 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338653361323338663433656361363031633135343035313337613166 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4617 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338653361323338663433656361363031633135343035313337613166 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit: BPF prog-id=155 op=LOAD Oct 2 19:22:11.474000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003e46f0 items=0 ppid=4617 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338653361323338663433656361363031633135343035313337613166 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.474000 audit: BPF prog-id=156 op=LOAD Oct 2 19:22:11.474000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003e4738 items=0 ppid=4617 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338653361323338663433656361363031633135343035313337613166 Oct 2 19:22:11.475000 audit: BPF prog-id=156 op=UNLOAD Oct 2 19:22:11.475000 audit: BPF prog-id=155 op=UNLOAD Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.475000 audit: BPF prog-id=157 op=LOAD Oct 2 19:22:11.475000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003e4b48 items=0 ppid=4617 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338653361323338663433656361363031633135343035313337613166 Oct 2 19:22:11.516965 env[1466]: time="2023-10-02T19:22:11.516895710Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-pfrbq,Uid:8c100c88-f12b-4e0f-9b20-51658738ad0e,Namespace:kube-system,Attempt:1,} returns sandbox id \"38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15\"" Oct 2 19:22:11.518372 env[1466]: time="2023-10-02T19:22:11.518351482Z" level=info msg="CreateContainer within sandbox \"38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:22:11.523371 env[1466]: time="2023-10-02T19:22:11.523325465Z" level=info msg="CreateContainer within sandbox \"38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"801b5f506dd2556a0d102183765bb3789bb5a5989fac6b48a7df566b43f478d2\"" Oct 2 19:22:11.523568 env[1466]: time="2023-10-02T19:22:11.523552235Z" level=info msg="StartContainer for \"801b5f506dd2556a0d102183765bb3789bb5a5989fac6b48a7df566b43f478d2\"" Oct 2 19:22:11.531655 systemd[1]: Started cri-containerd-801b5f506dd2556a0d102183765bb3789bb5a5989fac6b48a7df566b43f478d2.scope. Oct 2 19:22:11.538570 systemd-networkd[1349]: cali7cb39cce713: Gained IPv6LL Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit: BPF prog-id=158 op=LOAD Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4617 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316235663530366464323535366130643130323138333736356262 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4617 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316235663530366464323535366130643130323138333736356262 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.538000 audit: BPF prog-id=159 op=LOAD Oct 2 19:22:11.538000 audit[4658]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003b0120 items=0 ppid=4617 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316235663530366464323535366130643130323138333736356262 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit: BPF prog-id=160 op=LOAD Oct 2 19:22:11.539000 audit[4658]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003b0168 items=0 ppid=4617 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316235663530366464323535366130643130323138333736356262 Oct 2 19:22:11.539000 audit: BPF prog-id=160 op=UNLOAD Oct 2 19:22:11.539000 audit: BPF prog-id=159 op=UNLOAD Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:11.539000 audit: BPF prog-id=161 op=LOAD Oct 2 19:22:11.539000 audit[4658]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b0578 items=0 ppid=4617 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:11.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316235663530366464323535366130643130323138333736356262 Oct 2 19:22:11.558037 env[1466]: time="2023-10-02T19:22:11.557970057Z" level=info msg="StartContainer for \"801b5f506dd2556a0d102183765bb3789bb5a5989fac6b48a7df566b43f478d2\" returns successfully" Oct 2 19:22:12.362000 audit[4723]: NETFILTER_CFG table=filter:116 family=2 entries=12 op=nft_register_rule pid=4723 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:12.362000 audit[4723]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffd63057f10 a2=0 a3=7ffd63057efc items=0 ppid=2897 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:12.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:12.362000 audit[4723]: NETFILTER_CFG table=nat:117 family=2 entries=30 op=nft_register_rule pid=4723 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:12.362000 audit[4723]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffd63057f10 a2=0 a3=7ffd63057efc items=0 ppid=2897 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:12.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:12.444000 audit[4751]: NETFILTER_CFG table=filter:118 family=2 entries=9 op=nft_register_rule pid=4751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:12.444000 audit[4751]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffe64088840 a2=0 a3=7ffe6408882c items=0 ppid=2897 pid=4751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:12.444000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:12.445000 audit[4751]: NETFILTER_CFG table=nat:119 family=2 entries=51 op=nft_register_chain pid=4751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:12.445000 audit[4751]: SYSCALL arch=c000003e syscall=46 success=yes exit=19324 a0=3 a1=7ffe64088840 a2=0 a3=7ffe6408882c items=0 ppid=2897 pid=4751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:12.445000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:12.561773 systemd-networkd[1349]: calic87eef92a9b: Gained IPv6LL Oct 2 19:22:12.945802 systemd-networkd[1349]: calib1df00b13f2: Gained IPv6LL Oct 2 19:22:13.169245 env[1466]: time="2023-10-02T19:22:13.169123598Z" level=info msg="StopPodSandbox for \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\"" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.206 [INFO][4771] k8s.go 576: Cleaning up netns ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.207 [INFO][4771] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" iface="eth0" netns="/var/run/netns/cni-04ad1959-a3b1-335a-30c3-5069c2f364db" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.207 [INFO][4771] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" iface="eth0" netns="/var/run/netns/cni-04ad1959-a3b1-335a-30c3-5069c2f364db" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.207 [INFO][4771] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" iface="eth0" netns="/var/run/netns/cni-04ad1959-a3b1-335a-30c3-5069c2f364db" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.207 [INFO][4771] k8s.go 583: Releasing IP address(es) ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.207 [INFO][4771] utils.go 196: Calico CNI releasing IP address ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.217 [INFO][4789] ipam_plugin.go 416: Releasing address using handleID ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.223729 env[1466]: time="2023-10-02T19:22:13Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:13.223729 env[1466]: time="2023-10-02T19:22:13Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.221 [WARNING][4789] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.221 [INFO][4789] ipam_plugin.go 444: Releasing address using workloadID ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.223729 env[1466]: time="2023-10-02T19:22:13Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:13.223729 env[1466]: 2023-10-02 19:22:13.223 [INFO][4771] k8s.go 589: Teardown processing complete. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:13.224229 env[1466]: time="2023-10-02T19:22:13.223794459Z" level=info msg="TearDown network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\" successfully" Oct 2 19:22:13.224229 env[1466]: time="2023-10-02T19:22:13.223821342Z" level=info msg="StopPodSandbox for \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\" returns successfully" Oct 2 19:22:13.224287 env[1466]: time="2023-10-02T19:22:13.224242240Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-fzc52,Uid:7c5feed4-1050-40b0-91f6-e1955c1da4ca,Namespace:kube-system,Attempt:1,}" Oct 2 19:22:13.224922 systemd[1]: run-netns-cni\x2d04ad1959\x2da3b1\x2d335a\x2d30c3\x2d5069c2f364db.mount: Deactivated successfully. Oct 2 19:22:13.337173 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:22:13.337241 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie987178ae15: link becomes ready Oct 2 19:22:13.363986 systemd-networkd[1349]: calie987178ae15: Link UP Oct 2 19:22:13.363991 systemd-networkd[1349]: calie987178ae15: Gained carrier Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.247 [INFO][4802] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0 coredns-565d847f94- kube-system 7c5feed4-1050-40b0-91f6-e1955c1da4ca 683 0 2023-10-02 19:21:41 +0000 UTC map[k8s-app:kube-dns pod-template-hash:565d847f94 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.0-a-a82eb4d27c coredns-565d847f94-fzc52 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calie987178ae15 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.247 [INFO][4802] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.261 [INFO][4827] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" HandleID="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.267 [INFO][4827] ipam_plugin.go 269: Auto assigning IP ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" HandleID="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000125810), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.0-a-a82eb4d27c", "pod":"coredns-565d847f94-fzc52", "timestamp":"2023-10-02 19:22:13.261852722 +0000 UTC"}, Hostname:"ci-3510.3.0-a-a82eb4d27c", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:13.370584 env[1466]: time="2023-10-02T19:22:13Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:13.370584 env[1466]: time="2023-10-02T19:22:13Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.267 [INFO][4827] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-a82eb4d27c' Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.269 [INFO][4827] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.271 [INFO][4827] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.274 [INFO][4827] ipam.go 489: Trying affinity for 192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.275 [INFO][4827] ipam.go 155: Attempting to load block cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.276 [INFO][4827] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.276 [INFO][4827] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.27.0/26 handle="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.277 [INFO][4827] ipam.go 1682: Creating new handle: k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970 Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.279 [INFO][4827] ipam.go 1203: Writing block in order to claim IPs block=192.168.27.0/26 handle="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.282 [INFO][4827] ipam.go 1216: Successfully claimed IPs: [192.168.27.4/26] block=192.168.27.0/26 handle="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.282 [INFO][4827] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.27.4/26] handle="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:13.370584 env[1466]: time="2023-10-02T19:22:13Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:13.370584 env[1466]: 2023-10-02 19:22:13.282 [INFO][4827] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.27.4/26] IPv6=[] ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" HandleID="k8s-pod-network.88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.371144 env[1466]: 2023-10-02 19:22:13.283 [INFO][4802] k8s.go 383: Populated endpoint ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"7c5feed4-1050-40b0-91f6-e1955c1da4ca", ResourceVersion:"683", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"", Pod:"coredns-565d847f94-fzc52", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie987178ae15", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:13.371144 env[1466]: 2023-10-02 19:22:13.283 [INFO][4802] k8s.go 384: Calico CNI using IPs: [192.168.27.4/32] ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.371144 env[1466]: 2023-10-02 19:22:13.283 [INFO][4802] dataplane_linux.go 68: Setting the host side veth name to calie987178ae15 ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.371144 env[1466]: 2023-10-02 19:22:13.337 [INFO][4802] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.371144 env[1466]: 2023-10-02 19:22:13.364 [INFO][4802] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"7c5feed4-1050-40b0-91f6-e1955c1da4ca", ResourceVersion:"683", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970", Pod:"coredns-565d847f94-fzc52", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie987178ae15", MAC:"92:58:30:09:2d:db", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:13.371144 env[1466]: 2023-10-02 19:22:13.369 [INFO][4802] k8s.go 489: Wrote updated endpoint to datastore ContainerID="88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970" Namespace="kube-system" Pod="coredns-565d847f94-fzc52" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:13.375000 audit[4856]: NETFILTER_CFG table=filter:120 family=2 entries=38 op=nft_register_chain pid=4856 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:13.375000 audit[4856]: SYSCALL arch=c000003e syscall=46 success=yes exit=19088 a0=3 a1=7ffc480ff070 a2=0 a3=7ffc480ff05c items=0 ppid=3888 pid=4856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.375000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:13.377584 env[1466]: time="2023-10-02T19:22:13.377489833Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:13.377584 env[1466]: time="2023-10-02T19:22:13.377515704Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:13.377584 env[1466]: time="2023-10-02T19:22:13.377522562Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:13.377694 env[1466]: time="2023-10-02T19:22:13.377592252Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970 pid=4862 runtime=io.containerd.runc.v2 Oct 2 19:22:13.397106 systemd[1]: Started cri-containerd-88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970.scope. Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit: BPF prog-id=162 op=LOAD Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4862 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303337633766326266316335356434643931633036303433613237 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4862 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303337633766326266316335356434643931633036303433613237 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit: BPF prog-id=163 op=LOAD Oct 2 19:22:13.402000 audit[4872]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000306df0 items=0 ppid=4862 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303337633766326266316335356434643931633036303433613237 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit: BPF prog-id=164 op=LOAD Oct 2 19:22:13.402000 audit[4872]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000306e38 items=0 ppid=4862 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303337633766326266316335356434643931633036303433613237 Oct 2 19:22:13.402000 audit: BPF prog-id=164 op=UNLOAD Oct 2 19:22:13.402000 audit: BPF prog-id=163 op=UNLOAD Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { perfmon } for pid=4872 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit[4872]: AVC avc: denied { bpf } for pid=4872 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.402000 audit: BPF prog-id=165 op=LOAD Oct 2 19:22:13.402000 audit[4872]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000307248 items=0 ppid=4862 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303337633766326266316335356434643931633036303433613237 Oct 2 19:22:13.432221 env[1466]: time="2023-10-02T19:22:13.432163816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-fzc52,Uid:7c5feed4-1050-40b0-91f6-e1955c1da4ca,Namespace:kube-system,Attempt:1,} returns sandbox id \"88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970\"" Oct 2 19:22:13.433368 env[1466]: time="2023-10-02T19:22:13.433354829Z" level=info msg="CreateContainer within sandbox \"88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:22:13.508430 env[1466]: time="2023-10-02T19:22:13.508206623Z" level=info msg="CreateContainer within sandbox \"88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"9b7701101f66762fc3827ff47fec30eca9148b431ec11f3374cc887da2b39474\"" Oct 2 19:22:13.509315 env[1466]: time="2023-10-02T19:22:13.509242149Z" level=info msg="StartContainer for \"9b7701101f66762fc3827ff47fec30eca9148b431ec11f3374cc887da2b39474\"" Oct 2 19:22:13.545075 systemd[1]: Started cri-containerd-9b7701101f66762fc3827ff47fec30eca9148b431ec11f3374cc887da2b39474.scope. Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit: BPF prog-id=166 op=LOAD Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4862 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373730313130316636363736326663333832376666343766656333 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4862 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373730313130316636363736326663333832376666343766656333 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.552000 audit: BPF prog-id=167 op=LOAD Oct 2 19:22:13.552000 audit[4904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003be0a0 items=0 ppid=4862 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373730313130316636363736326663333832376666343766656333 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit: BPF prog-id=168 op=LOAD Oct 2 19:22:13.553000 audit[4904]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003be0e8 items=0 ppid=4862 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373730313130316636363736326663333832376666343766656333 Oct 2 19:22:13.553000 audit: BPF prog-id=168 op=UNLOAD Oct 2 19:22:13.553000 audit: BPF prog-id=167 op=UNLOAD Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.553000 audit: BPF prog-id=169 op=LOAD Oct 2 19:22:13.553000 audit[4904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003be4f8 items=0 ppid=4862 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373730313130316636363736326663333832376666343766656333 Oct 2 19:22:13.573314 env[1466]: time="2023-10-02T19:22:13.573248602Z" level=info msg="StartContainer for \"9b7701101f66762fc3827ff47fec30eca9148b431ec11f3374cc887da2b39474\" returns successfully" Oct 2 19:22:13.959786 env[1466]: time="2023-10-02T19:22:13.959731333Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:13.960356 env[1466]: time="2023-10-02T19:22:13.960340680Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:13.961223 env[1466]: time="2023-10-02T19:22:13.961201029Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:13.962501 env[1466]: time="2023-10-02T19:22:13.962481585Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:22:13.962870 env[1466]: time="2023-10-02T19:22:13.962855329Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78\"" Oct 2 19:22:13.963276 env[1466]: time="2023-10-02T19:22:13.963244882Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:22:13.964289 env[1466]: time="2023-10-02T19:22:13.964261496Z" level=info msg="CreateContainer within sandbox \"fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 19:22:13.968804 env[1466]: time="2023-10-02T19:22:13.968762079Z" level=info msg="CreateContainer within sandbox \"fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"795bfb31c1ec5304d3281ee49728ca98a078d2b38ef5b46af8b2cabdb5e9a251\"" Oct 2 19:22:13.969059 env[1466]: time="2023-10-02T19:22:13.969022913Z" level=info msg="StartContainer for \"795bfb31c1ec5304d3281ee49728ca98a078d2b38ef5b46af8b2cabdb5e9a251\"" Oct 2 19:22:13.978334 systemd[1]: Started cri-containerd-795bfb31c1ec5304d3281ee49728ca98a078d2b38ef5b46af8b2cabdb5e9a251.scope. Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit: BPF prog-id=170 op=LOAD Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=4562 pid=4952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739356266623331633165633533303464333238316565343937323863 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=4562 pid=4952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739356266623331633165633533303464333238316565343937323863 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit: BPF prog-id=171 op=LOAD Oct 2 19:22:13.983000 audit[4952]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c000218b90 items=0 ppid=4562 pid=4952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739356266623331633165633533303464333238316565343937323863 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.983000 audit: BPF prog-id=172 op=LOAD Oct 2 19:22:13.983000 audit[4952]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c000218bd8 items=0 ppid=4562 pid=4952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739356266623331633165633533303464333238316565343937323863 Oct 2 19:22:13.983000 audit: BPF prog-id=172 op=UNLOAD Oct 2 19:22:13.984000 audit: BPF prog-id=171 op=UNLOAD Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { perfmon } for pid=4952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit[4952]: AVC avc: denied { bpf } for pid=4952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:13.984000 audit: BPF prog-id=173 op=LOAD Oct 2 19:22:13.984000 audit[4952]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c000218fe8 items=0 ppid=4562 pid=4952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:13.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739356266623331633165633533303464333238316565343937323863 Oct 2 19:22:14.004419 env[1466]: time="2023-10-02T19:22:14.004384890Z" level=info msg="StartContainer for \"795bfb31c1ec5304d3281ee49728ca98a078d2b38ef5b46af8b2cabdb5e9a251\" returns successfully" Oct 2 19:22:14.199692 env[1466]: time="2023-10-02T19:22:14.199606621Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:14.200416 env[1466]: time="2023-10-02T19:22:14.200343417Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:14.200672 kubelet[2598]: E1002 19:22:14.200619 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:14.200672 kubelet[2598]: E1002 19:22:14.200666 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:14.201070 kubelet[2598]: E1002 19:22:14.200767 2598 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:14.201070 kubelet[2598]: E1002 19:22:14.200834 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:22:14.325567 kubelet[2598]: E1002 19:22:14.325392 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:22:14.391000 audit[5017]: NETFILTER_CFG table=filter:121 family=2 entries=6 op=nft_register_rule pid=5017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:14.391000 audit[5017]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffca0755a80 a2=0 a3=7ffca0755a6c items=0 ppid=2897 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:14.391000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:14.392000 audit[5017]: NETFILTER_CFG table=nat:122 family=2 entries=60 op=nft_register_rule pid=5017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:14.392000 audit[5017]: SYSCALL arch=c000003e syscall=46 success=yes exit=19324 a0=3 a1=7ffca0755a80 a2=0 a3=7ffca0755a6c items=0 ppid=2897 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:14.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:14.425000 audit[5043]: NETFILTER_CFG table=filter:123 family=2 entries=6 op=nft_register_rule pid=5043 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:14.425000 audit[5043]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffdcc9c13a0 a2=0 a3=7ffdcc9c138c items=0 ppid=2897 pid=5043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:14.425000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:14.428000 audit[5043]: NETFILTER_CFG table=nat:124 family=2 entries=72 op=nft_register_chain pid=5043 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:14.428000 audit[5043]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffdcc9c13a0 a2=0 a3=7ffdcc9c138c items=0 ppid=2897 pid=5043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:14.428000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:14.545858 systemd-networkd[1349]: calie987178ae15: Gained IPv6LL Oct 2 19:22:16.268208 kubelet[2598]: I1002 19:22:16.268161 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:22:16.273605 kubelet[2598]: I1002 19:22:16.273561 2598 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:22:16.275017 systemd[1]: Created slice kubepods-besteffort-pode64bc7b8_5010_44fc_ab54_26b9ac1ebe2a.slice. Oct 2 19:22:16.279825 systemd[1]: Created slice kubepods-besteffort-pod82dd054e_36ec_4da3_aa12_071d46f16fc5.slice. Oct 2 19:22:16.291000 audit[5093]: NETFILTER_CFG table=filter:125 family=2 entries=7 op=nft_register_rule pid=5093 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.316979 kernel: kauditd_printk_skb: 425 callbacks suppressed Oct 2 19:22:16.317055 kernel: audit: type=1325 audit(1696274536.291:1312): table=filter:125 family=2 entries=7 op=nft_register_rule pid=5093 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.291000 audit[5093]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffd0e50fc10 a2=0 a3=7ffd0e50fbfc items=0 ppid=2897 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:16.381515 kubelet[2598]: I1002 19:22:16.381472 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a-calico-apiserver-certs\") pod \"calico-apiserver-66bb99bc75-86j2m\" (UID: \"e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a\") " pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" Oct 2 19:22:16.381515 kubelet[2598]: I1002 19:22:16.381506 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-97h6r\" (UniqueName: \"kubernetes.io/projected/82dd054e-36ec-4da3-aa12-071d46f16fc5-kube-api-access-97h6r\") pod \"calico-apiserver-66bb99bc75-x9wjr\" (UID: \"82dd054e-36ec-4da3-aa12-071d46f16fc5\") " pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" Oct 2 19:22:16.381602 kubelet[2598]: I1002 19:22:16.381521 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/82dd054e-36ec-4da3-aa12-071d46f16fc5-calico-apiserver-certs\") pod \"calico-apiserver-66bb99bc75-x9wjr\" (UID: \"82dd054e-36ec-4da3-aa12-071d46f16fc5\") " pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" Oct 2 19:22:16.381602 kubelet[2598]: I1002 19:22:16.381535 2598 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-68mp2\" (UniqueName: \"kubernetes.io/projected/e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a-kube-api-access-68mp2\") pod \"calico-apiserver-66bb99bc75-86j2m\" (UID: \"e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a\") " pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" Oct 2 19:22:16.463892 kernel: audit: type=1300 audit(1696274536.291:1312): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffd0e50fc10 a2=0 a3=7ffd0e50fbfc items=0 ppid=2897 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:16.463932 kernel: audit: type=1327 audit(1696274536.291:1312): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:16.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:16.482325 kubelet[2598]: E1002 19:22:16.482271 2598 secret.go:192] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Oct 2 19:22:16.482325 kubelet[2598]: E1002 19:22:16.482270 2598 secret.go:192] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Oct 2 19:22:16.482449 kubelet[2598]: E1002 19:22:16.482334 2598 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a-calico-apiserver-certs podName:e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a nodeName:}" failed. No retries permitted until 2023-10-02 19:22:16.98231405 +0000 UTC m=+49.881758731 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a-calico-apiserver-certs") pod "calico-apiserver-66bb99bc75-86j2m" (UID: "e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a") : secret "calico-apiserver-certs" not found Oct 2 19:22:16.482449 kubelet[2598]: E1002 19:22:16.482353 2598 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/82dd054e-36ec-4da3-aa12-071d46f16fc5-calico-apiserver-certs podName:82dd054e-36ec-4da3-aa12-071d46f16fc5 nodeName:}" failed. No retries permitted until 2023-10-02 19:22:16.982341747 +0000 UTC m=+49.881786432 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/82dd054e-36ec-4da3-aa12-071d46f16fc5-calico-apiserver-certs") pod "calico-apiserver-66bb99bc75-x9wjr" (UID: "82dd054e-36ec-4da3-aa12-071d46f16fc5") : secret "calico-apiserver-certs" not found Oct 2 19:22:16.292000 audit[5093]: NETFILTER_CFG table=nat:126 family=2 entries=78 op=nft_register_rule pid=5093 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.292000 audit[5093]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffd0e50fc10 a2=0 a3=7ffd0e50fbfc items=0 ppid=2897 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:16.672492 kernel: audit: type=1325 audit(1696274536.292:1313): table=nat:126 family=2 entries=78 op=nft_register_rule pid=5093 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.672562 kernel: audit: type=1300 audit(1696274536.292:1313): arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffd0e50fc10 a2=0 a3=7ffd0e50fbfc items=0 ppid=2897 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:16.672583 kernel: audit: type=1327 audit(1696274536.292:1313): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:16.292000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:16.543000 audit[5121]: NETFILTER_CFG table=filter:127 family=2 entries=8 op=nft_register_rule pid=5121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.543000 audit[5121]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffc164ef170 a2=0 a3=7ffc164ef15c items=0 ppid=2897 pid=5121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:16.877771 kernel: audit: type=1325 audit(1696274536.543:1314): table=filter:127 family=2 entries=8 op=nft_register_rule pid=5121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.877861 kernel: audit: type=1300 audit(1696274536.543:1314): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffc164ef170 a2=0 a3=7ffc164ef15c items=0 ppid=2897 pid=5121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:16.877890 kernel: audit: type=1327 audit(1696274536.543:1314): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:16.543000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:16.730000 audit[5121]: NETFILTER_CFG table=nat:128 family=2 entries=78 op=nft_register_rule pid=5121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.990517 kernel: audit: type=1325 audit(1696274536.730:1315): table=nat:128 family=2 entries=78 op=nft_register_rule pid=5121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:16.730000 audit[5121]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffc164ef170 a2=0 a3=7ffc164ef15c items=0 ppid=2897 pid=5121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:16.730000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:17.178150 env[1466]: time="2023-10-02T19:22:17.178012110Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66bb99bc75-86j2m,Uid:e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:22:17.182296 env[1466]: time="2023-10-02T19:22:17.182239318Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66bb99bc75-x9wjr,Uid:82dd054e-36ec-4da3-aa12-071d46f16fc5,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:22:17.301339 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:22:17.301431 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califf1ddfab5fa: link becomes ready Oct 2 19:22:17.339859 systemd-networkd[1349]: califf1ddfab5fa: Link UP Oct 2 19:22:17.339867 systemd-networkd[1349]: califf1ddfab5fa: Gained carrier Oct 2 19:22:17.340552 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali68ea488d67f: link becomes ready Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.210 [INFO][5152] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0 calico-apiserver-66bb99bc75- calico-apiserver e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a 769 0 2023-10-02 19:22:16 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66bb99bc75 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.0-a-a82eb4d27c calico-apiserver-66bb99bc75-86j2m eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] califf1ddfab5fa [] []}} ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.210 [INFO][5152] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.225 [INFO][5194] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" HandleID="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.231 [INFO][5194] ipam_plugin.go 269: Auto assigning IP ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" HandleID="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000699f20), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.0-a-a82eb4d27c", "pod":"calico-apiserver-66bb99bc75-86j2m", "timestamp":"2023-10-02 19:22:17.225426901 +0000 UTC"}, Hostname:"ci-3510.3.0-a-a82eb4d27c", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:17.345032 env[1466]: time="2023-10-02T19:22:17Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:17.345032 env[1466]: time="2023-10-02T19:22:17Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.231 [INFO][5194] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-a82eb4d27c' Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.232 [INFO][5194] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.235 [INFO][5194] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.237 [INFO][5194] ipam.go 489: Trying affinity for 192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.238 [INFO][5194] ipam.go 155: Attempting to load block cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.240 [INFO][5194] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.240 [INFO][5194] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.27.0/26 handle="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.241 [INFO][5194] ipam.go 1682: Creating new handle: k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.243 [INFO][5194] ipam.go 1203: Writing block in order to claim IPs block=192.168.27.0/26 handle="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.246 [INFO][5194] ipam.go 1216: Successfully claimed IPs: [192.168.27.5/26] block=192.168.27.0/26 handle="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.246 [INFO][5194] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.27.5/26] handle="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.345032 env[1466]: time="2023-10-02T19:22:17Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:17.345032 env[1466]: 2023-10-02 19:22:17.246 [INFO][5194] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.27.5/26] IPv6=[] ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" HandleID="k8s-pod-network.7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" Oct 2 19:22:17.345520 env[1466]: 2023-10-02 19:22:17.247 [INFO][5152] k8s.go 383: Populated endpoint ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0", GenerateName:"calico-apiserver-66bb99bc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a", ResourceVersion:"769", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66bb99bc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"", Pod:"calico-apiserver-66bb99bc75-86j2m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.27.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califf1ddfab5fa", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:17.345520 env[1466]: 2023-10-02 19:22:17.247 [INFO][5152] k8s.go 384: Calico CNI using IPs: [192.168.27.5/32] ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" Oct 2 19:22:17.345520 env[1466]: 2023-10-02 19:22:17.247 [INFO][5152] dataplane_linux.go 68: Setting the host side veth name to califf1ddfab5fa ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" Oct 2 19:22:17.345520 env[1466]: 2023-10-02 19:22:17.301 [INFO][5152] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" Oct 2 19:22:17.345520 env[1466]: 2023-10-02 19:22:17.339 [INFO][5152] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0", GenerateName:"calico-apiserver-66bb99bc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a", ResourceVersion:"769", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66bb99bc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce", Pod:"calico-apiserver-66bb99bc75-86j2m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.27.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califf1ddfab5fa", MAC:"22:e8:46:ca:e1:16", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:17.345520 env[1466]: 2023-10-02 19:22:17.343 [INFO][5152] k8s.go 489: Wrote updated endpoint to datastore ContainerID="7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-86j2m" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--86j2m-eth0" Oct 2 19:22:17.350931 env[1466]: time="2023-10-02T19:22:17.350867895Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:17.350931 env[1466]: time="2023-10-02T19:22:17.350888635Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:17.350931 env[1466]: time="2023-10-02T19:22:17.350895534Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:17.351063 env[1466]: time="2023-10-02T19:22:17.351010679Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce pid=5261 runtime=io.containerd.runc.v2 Oct 2 19:22:17.354148 systemd-networkd[1349]: cali68ea488d67f: Link UP Oct 2 19:22:17.354159 systemd-networkd[1349]: cali68ea488d67f: Gained carrier Oct 2 19:22:17.354000 audit[5274]: NETFILTER_CFG table=filter:129 family=2 entries=59 op=nft_register_chain pid=5274 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:17.354000 audit[5274]: SYSCALL arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffd08273570 a2=0 a3=7ffd0827355c items=0 ppid=3888 pid=5274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.354000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.211 [INFO][5157] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0 calico-apiserver-66bb99bc75- calico-apiserver 82dd054e-36ec-4da3-aa12-071d46f16fc5 771 0 2023-10-02 19:22:16 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66bb99bc75 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.0-a-a82eb4d27c calico-apiserver-66bb99bc75-x9wjr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali68ea488d67f [] []}} ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.211 [INFO][5157] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.225 [INFO][5195] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" HandleID="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.232 [INFO][5195] ipam_plugin.go 269: Auto assigning IP ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" HandleID="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0004cd270), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.0-a-a82eb4d27c", "pod":"calico-apiserver-66bb99bc75-x9wjr", "timestamp":"2023-10-02 19:22:17.225632108 +0000 UTC"}, Hostname:"ci-3510.3.0-a-a82eb4d27c", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:22:17.359395 env[1466]: time="2023-10-02T19:22:17Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:17.359395 env[1466]: time="2023-10-02T19:22:17Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.246 [INFO][5195] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.0-a-a82eb4d27c' Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.247 [INFO][5195] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.249 [INFO][5195] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.252 [INFO][5195] ipam.go 489: Trying affinity for 192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.253 [INFO][5195] ipam.go 155: Attempting to load block cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.255 [INFO][5195] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.27.0/26 host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.255 [INFO][5195] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.27.0/26 handle="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.256 [INFO][5195] ipam.go 1682: Creating new handle: k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.258 [INFO][5195] ipam.go 1203: Writing block in order to claim IPs block=192.168.27.0/26 handle="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.260 [INFO][5195] ipam.go 1216: Successfully claimed IPs: [192.168.27.6/26] block=192.168.27.0/26 handle="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.260 [INFO][5195] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.27.6/26] handle="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" host="ci-3510.3.0-a-a82eb4d27c" Oct 2 19:22:17.359395 env[1466]: time="2023-10-02T19:22:17Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:17.359395 env[1466]: 2023-10-02 19:22:17.261 [INFO][5195] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.27.6/26] IPv6=[] ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" HandleID="k8s-pod-network.2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" Oct 2 19:22:17.359846 env[1466]: 2023-10-02 19:22:17.261 [INFO][5157] k8s.go 383: Populated endpoint ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0", GenerateName:"calico-apiserver-66bb99bc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"82dd054e-36ec-4da3-aa12-071d46f16fc5", ResourceVersion:"771", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66bb99bc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"", Pod:"calico-apiserver-66bb99bc75-x9wjr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.27.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali68ea488d67f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:17.359846 env[1466]: 2023-10-02 19:22:17.262 [INFO][5157] k8s.go 384: Calico CNI using IPs: [192.168.27.6/32] ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" Oct 2 19:22:17.359846 env[1466]: 2023-10-02 19:22:17.262 [INFO][5157] dataplane_linux.go 68: Setting the host side veth name to cali68ea488d67f ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" Oct 2 19:22:17.359846 env[1466]: 2023-10-02 19:22:17.339 [INFO][5157] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" Oct 2 19:22:17.359846 env[1466]: 2023-10-02 19:22:17.353 [INFO][5157] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0", GenerateName:"calico-apiserver-66bb99bc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"82dd054e-36ec-4da3-aa12-071d46f16fc5", ResourceVersion:"771", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 22, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66bb99bc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b", Pod:"calico-apiserver-66bb99bc75-x9wjr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.27.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali68ea488d67f", MAC:"b2:04:a9:98:7b:01", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:17.359846 env[1466]: 2023-10-02 19:22:17.358 [INFO][5157] k8s.go 489: Wrote updated endpoint to datastore ContainerID="2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b" Namespace="calico-apiserver" Pod="calico-apiserver-66bb99bc75-x9wjr" WorkloadEndpoint="ci--3510.3.0--a--a82eb4d27c-k8s-calico--apiserver--66bb99bc75--x9wjr-eth0" Oct 2 19:22:17.364894 env[1466]: time="2023-10-02T19:22:17.364795267Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:17.364894 env[1466]: time="2023-10-02T19:22:17.364816683Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:17.364894 env[1466]: time="2023-10-02T19:22:17.364823519Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:17.364998 env[1466]: time="2023-10-02T19:22:17.364933853Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b pid=5296 runtime=io.containerd.runc.v2 Oct 2 19:22:17.370607 systemd[1]: Started cri-containerd-7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce.scope. Oct 2 19:22:17.373000 audit[5319]: NETFILTER_CFG table=filter:130 family=2 entries=50 op=nft_register_chain pid=5319 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:22:17.373000 audit[5319]: SYSCALL arch=c000003e syscall=46 success=yes exit=24496 a0=3 a1=7ffcbd1ab660 a2=0 a3=7ffcbd1ab64c items=0 ppid=3888 pid=5319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.373000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit: BPF prog-id=174 op=LOAD Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=5261 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761646639326139326563666563366566343361313738666432626463 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=5261 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761646639326139326563666563366566343361313738666432626463 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit: BPF prog-id=175 op=LOAD Oct 2 19:22:17.377000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000214b20 items=0 ppid=5261 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761646639326139326563666563366566343361313738666432626463 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit: BPF prog-id=176 op=LOAD Oct 2 19:22:17.377000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000214b68 items=0 ppid=5261 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761646639326139326563666563366566343361313738666432626463 Oct 2 19:22:17.377000 audit: BPF prog-id=176 op=UNLOAD Oct 2 19:22:17.377000 audit: BPF prog-id=175 op=UNLOAD Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.377000 audit: BPF prog-id=177 op=LOAD Oct 2 19:22:17.377000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000214f78 items=0 ppid=5261 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761646639326139326563666563366566343361313738666432626463 Oct 2 19:22:17.383221 systemd[1]: Started cri-containerd-2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b.scope. Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit: BPF prog-id=178 op=LOAD Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=5296 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265653038643133383435653535303936663238626638383363613165 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=5296 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265653038643133383435653535303936663238626638383363613165 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit: BPF prog-id=179 op=LOAD Oct 2 19:22:17.389000 audit[5308]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000309150 items=0 ppid=5296 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265653038643133383435653535303936663238626638383363613165 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit: BPF prog-id=180 op=LOAD Oct 2 19:22:17.389000 audit[5308]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000309198 items=0 ppid=5296 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265653038643133383435653535303936663238626638383363613165 Oct 2 19:22:17.389000 audit: BPF prog-id=180 op=UNLOAD Oct 2 19:22:17.389000 audit: BPF prog-id=179 op=UNLOAD Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:17.389000 audit: BPF prog-id=181 op=LOAD Oct 2 19:22:17.389000 audit[5308]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003095a8 items=0 ppid=5296 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:17.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265653038643133383435653535303936663238626638383363613165 Oct 2 19:22:17.395522 env[1466]: time="2023-10-02T19:22:17.395477947Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66bb99bc75-86j2m,Uid:e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"7adf92a92ecfec6ef43a178fd2bdce3c67a4c1b23af83a883dafd52c1fb55dce\"" Oct 2 19:22:17.396188 env[1466]: time="2023-10-02T19:22:17.396174151Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:17.408116 env[1466]: time="2023-10-02T19:22:17.408084624Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66bb99bc75-x9wjr,Uid:82dd054e-36ec-4da3-aa12-071d46f16fc5,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"2ee08d13845e55096f28bf883ca1ed68ee41d78dbfdbcb0b06de4a63efdc208b\"" Oct 2 19:22:17.668690 env[1466]: time="2023-10-02T19:22:17.668539710Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:17.669605 env[1466]: time="2023-10-02T19:22:17.669483346Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:17.670045 kubelet[2598]: E1002 19:22:17.669963 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:17.670045 kubelet[2598]: E1002 19:22:17.670049 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:17.670916 kubelet[2598]: E1002 19:22:17.670529 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68mp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-86j2m_calico-apiserver(e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:17.670916 kubelet[2598]: E1002 19:22:17.670672 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:22:17.671405 env[1466]: time="2023-10-02T19:22:17.670713926Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:17.958097 env[1466]: time="2023-10-02T19:22:17.957838591Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:17.958720 env[1466]: time="2023-10-02T19:22:17.958629512Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:17.959128 kubelet[2598]: E1002 19:22:17.959057 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:17.959386 kubelet[2598]: E1002 19:22:17.959146 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:17.959386 kubelet[2598]: E1002 19:22:17.959376 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-97h6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-x9wjr_calico-apiserver(82dd054e-36ec-4da3-aa12-071d46f16fc5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:17.959943 kubelet[2598]: E1002 19:22:17.959471 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:22:18.335753 kubelet[2598]: E1002 19:22:18.335537 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:22:18.337667 kubelet[2598]: E1002 19:22:18.337589 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:22:18.385717 systemd-networkd[1349]: cali68ea488d67f: Gained IPv6LL Oct 2 19:22:18.420000 audit[5378]: NETFILTER_CFG table=filter:131 family=2 entries=8 op=nft_register_rule pid=5378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:18.420000 audit[5378]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffc0b1dedd0 a2=0 a3=7ffc0b1dedbc items=0 ppid=2897 pid=5378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.420000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:18.422000 audit[5378]: NETFILTER_CFG table=nat:132 family=2 entries=78 op=nft_register_rule pid=5378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:18.422000 audit[5378]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffc0b1dedd0 a2=0 a3=7ffc0b1dedbc items=0 ppid=2897 pid=5378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.422000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:18.461000 audit[5404]: NETFILTER_CFG table=filter:133 family=2 entries=8 op=nft_register_rule pid=5404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:18.461000 audit[5404]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff866bb8a0 a2=0 a3=7fff866bb88c items=0 ppid=2897 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.461000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:18.463000 audit[5404]: NETFILTER_CFG table=nat:134 family=2 entries=78 op=nft_register_rule pid=5404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:22:18.463000 audit[5404]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff866bb8a0 a2=0 a3=7fff866bb88c items=0 ppid=2897 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:18.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:22:19.089785 systemd-networkd[1349]: califf1ddfab5fa: Gained IPv6LL Oct 2 19:22:19.341190 kubelet[2598]: E1002 19:22:19.340969 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:22:19.341190 kubelet[2598]: E1002 19:22:19.340972 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:22:22.465000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:22.491940 kernel: kauditd_printk_skb: 134 callbacks suppressed Oct 2 19:22:22.492008 kernel: audit: type=1400 audit(1696274542.465:1358): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:22.465000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0001cb9e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:22.690077 kernel: audit: type=1300 audit(1696274542.465:1358): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0001cb9e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:22.690134 kernel: audit: type=1327 audit(1696274542.465:1358): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:22.465000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:22.776677 kernel: audit: type=1400 audit(1696274542.465:1359): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:22.465000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:22.862150 kernel: audit: type=1300 audit(1696274542.465:1359): arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c0014da990 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:22.465000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c0014da990 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:22.974679 kernel: audit: type=1327 audit(1696274542.465:1359): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:22.465000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:23.911000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:23.911000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00804ac30 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:22:24.099048 kernel: audit: type=1400 audit(1696274543.911:1360): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:24.099081 kernel: audit: type=1300 audit(1696274543.911:1360): arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00804ac30 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:22:24.099103 kernel: audit: type=1327 audit(1696274543.911:1360): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:22:23.911000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:22:24.190205 kernel: audit: type=1400 audit(1696274543.911:1361): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:23.911000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:23.911000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c009e40de0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:22:23.911000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:22:23.911000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:23.911000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c001787ce0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:22:23.911000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:22:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00804ae40 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:22:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:22:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c001e53340 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:22:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:22:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00804aea0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:22:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:22:26.170679 env[1466]: time="2023-10-02T19:22:26.170579443Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:22:26.402199 env[1466]: time="2023-10-02T19:22:26.402039002Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:26.403091 env[1466]: time="2023-10-02T19:22:26.402987956Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:26.403633 kubelet[2598]: E1002 19:22:26.403547 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:26.403633 kubelet[2598]: E1002 19:22:26.403644 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:26.404475 kubelet[2598]: E1002 19:22:26.403852 2598 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:26.405693 env[1466]: time="2023-10-02T19:22:26.405581999Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:22:26.680539 env[1466]: time="2023-10-02T19:22:26.680381040Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:26.681471 env[1466]: time="2023-10-02T19:22:26.681332011Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:26.681946 kubelet[2598]: E1002 19:22:26.681879 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:26.682169 kubelet[2598]: E1002 19:22:26.682016 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:26.682352 kubelet[2598]: E1002 19:22:26.682314 2598 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:26.682703 kubelet[2598]: E1002 19:22:26.682567 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:22:27.151128 env[1466]: time="2023-10-02T19:22:27.151078394Z" level=info msg="StopPodSandbox for \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\"" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.170 [WARNING][5479] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"c21fe48d-9432-4776-ac6e-00596130f0b0", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7", Pod:"calico-kube-controllers-69d9c784fb-4mbvh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.27.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1df00b13f2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.170 [INFO][5479] k8s.go 576: Cleaning up netns ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.170 [INFO][5479] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" iface="eth0" netns="" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.170 [INFO][5479] k8s.go 583: Releasing IP address(es) ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.170 [INFO][5479] utils.go 196: Calico CNI releasing IP address ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.180 [INFO][5499] ipam_plugin.go 416: Releasing address using handleID ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:27.186711 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.186711 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.184 [WARNING][5499] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.184 [INFO][5499] ipam_plugin.go 444: Releasing address using workloadID ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:27.186711 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.186711 env[1466]: 2023-10-02 19:22:27.186 [INFO][5479] k8s.go 589: Teardown processing complete. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.187164 env[1466]: time="2023-10-02T19:22:27.186706557Z" level=info msg="TearDown network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\" successfully" Oct 2 19:22:27.187164 env[1466]: time="2023-10-02T19:22:27.186728638Z" level=info msg="StopPodSandbox for \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\" returns successfully" Oct 2 19:22:27.187164 env[1466]: time="2023-10-02T19:22:27.186938701Z" level=info msg="RemovePodSandbox for \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\"" Oct 2 19:22:27.187164 env[1466]: time="2023-10-02T19:22:27.186956938Z" level=info msg="Forcibly stopping sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\"" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.205 [WARNING][5530] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"c21fe48d-9432-4776-ac6e-00596130f0b0", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"fa9786bfe3837e343ae23a07af13358e670ad6eb3acd86540ce6b18c89fbfca7", Pod:"calico-kube-controllers-69d9c784fb-4mbvh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.27.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1df00b13f2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.205 [INFO][5530] k8s.go 576: Cleaning up netns ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.205 [INFO][5530] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" iface="eth0" netns="" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.205 [INFO][5530] k8s.go 583: Releasing IP address(es) ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.205 [INFO][5530] utils.go 196: Calico CNI releasing IP address ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.215 [INFO][5545] ipam_plugin.go 416: Releasing address using handleID ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:27.222388 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.222388 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.219 [WARNING][5545] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.219 [INFO][5545] ipam_plugin.go 444: Releasing address using workloadID ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" HandleID="k8s-pod-network.bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-calico--kube--controllers--69d9c784fb--4mbvh-eth0" Oct 2 19:22:27.222388 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.222388 env[1466]: 2023-10-02 19:22:27.221 [INFO][5530] k8s.go 589: Teardown processing complete. ContainerID="bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc" Oct 2 19:22:27.222737 env[1466]: time="2023-10-02T19:22:27.222409883Z" level=info msg="TearDown network for sandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\" successfully" Oct 2 19:22:27.223664 env[1466]: time="2023-10-02T19:22:27.223652161Z" level=info msg="RemovePodSandbox \"bb251a58e65477eac2015eedda7d5df9930ca6c804bb6ab6c215df5f35f0bccc\" returns successfully" Oct 2 19:22:27.223936 env[1466]: time="2023-10-02T19:22:27.223922625Z" level=info msg="StopPodSandbox for \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\"" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.242 [WARNING][5572] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"8c100c88-f12b-4e0f-9b20-51658738ad0e", ResourceVersion:"677", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15", Pod:"coredns-565d847f94-pfrbq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic87eef92a9b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.242 [INFO][5572] k8s.go 576: Cleaning up netns ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.242 [INFO][5572] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" iface="eth0" netns="" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.242 [INFO][5572] k8s.go 583: Releasing IP address(es) ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.242 [INFO][5572] utils.go 196: Calico CNI releasing IP address ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.251 [INFO][5587] ipam_plugin.go 416: Releasing address using handleID ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:27.259001 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.259001 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.256 [WARNING][5587] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.256 [INFO][5587] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:27.259001 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.259001 env[1466]: 2023-10-02 19:22:27.258 [INFO][5572] k8s.go 589: Teardown processing complete. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.259333 env[1466]: time="2023-10-02T19:22:27.259014914Z" level=info msg="TearDown network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\" successfully" Oct 2 19:22:27.259333 env[1466]: time="2023-10-02T19:22:27.259033966Z" level=info msg="StopPodSandbox for \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\" returns successfully" Oct 2 19:22:27.259333 env[1466]: time="2023-10-02T19:22:27.259260210Z" level=info msg="RemovePodSandbox for \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\"" Oct 2 19:22:27.259333 env[1466]: time="2023-10-02T19:22:27.259277055Z" level=info msg="Forcibly stopping sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\"" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.277 [WARNING][5614] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"8c100c88-f12b-4e0f-9b20-51658738ad0e", ResourceVersion:"677", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"38e3a238f43eca601c15405137a1f0755dc3c65d4f20fa18e5a87cd4d0754b15", Pod:"coredns-565d847f94-pfrbq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic87eef92a9b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.277 [INFO][5614] k8s.go 576: Cleaning up netns ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.277 [INFO][5614] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" iface="eth0" netns="" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.277 [INFO][5614] k8s.go 583: Releasing IP address(es) ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.277 [INFO][5614] utils.go 196: Calico CNI releasing IP address ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.288 [INFO][5628] ipam_plugin.go 416: Releasing address using handleID ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:27.294825 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.294825 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.292 [WARNING][5628] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.292 [INFO][5628] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" HandleID="k8s-pod-network.0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--pfrbq-eth0" Oct 2 19:22:27.294825 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.294825 env[1466]: 2023-10-02 19:22:27.294 [INFO][5614] k8s.go 589: Teardown processing complete. ContainerID="0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0" Oct 2 19:22:27.294825 env[1466]: time="2023-10-02T19:22:27.294809896Z" level=info msg="TearDown network for sandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\" successfully" Oct 2 19:22:27.296130 env[1466]: time="2023-10-02T19:22:27.296088898Z" level=info msg="RemovePodSandbox \"0bdbc2ed72f0e1fabe5848739a0d8993d0b2ec72a0733bf4335f1ebb47d6e0e0\" returns successfully" Oct 2 19:22:27.296433 env[1466]: time="2023-10-02T19:22:27.296394850Z" level=info msg="StopPodSandbox for \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\"" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.317 [WARNING][5654] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96f74700-0a9b-4c08-af27-e7ef6b1596f5", ResourceVersion:"825", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290", Pod:"csi-node-driver-f2jvq", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.27.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7cb39cce713", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.317 [INFO][5654] k8s.go 576: Cleaning up netns ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.317 [INFO][5654] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" iface="eth0" netns="" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.317 [INFO][5654] k8s.go 583: Releasing IP address(es) ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.317 [INFO][5654] utils.go 196: Calico CNI releasing IP address ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.329 [INFO][5669] ipam_plugin.go 416: Releasing address using handleID ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:27.337982 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.337982 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.334 [WARNING][5669] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.334 [INFO][5669] ipam_plugin.go 444: Releasing address using workloadID ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:27.337982 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.337982 env[1466]: 2023-10-02 19:22:27.337 [INFO][5654] k8s.go 589: Teardown processing complete. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.338591 env[1466]: time="2023-10-02T19:22:27.337998830Z" level=info msg="TearDown network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\" successfully" Oct 2 19:22:27.338591 env[1466]: time="2023-10-02T19:22:27.338029253Z" level=info msg="StopPodSandbox for \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\" returns successfully" Oct 2 19:22:27.338591 env[1466]: time="2023-10-02T19:22:27.338388122Z" level=info msg="RemovePodSandbox for \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\"" Oct 2 19:22:27.338591 env[1466]: time="2023-10-02T19:22:27.338423916Z" level=info msg="Forcibly stopping sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\"" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.370 [WARNING][5698] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96f74700-0a9b-4c08-af27-e7ef6b1596f5", ResourceVersion:"825", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"7c19ca2e5f6ed6b9b3cc4c9ca613c056677c593ce333d26a443bb9a604dd9290", Pod:"csi-node-driver-f2jvq", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.27.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7cb39cce713", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.370 [INFO][5698] k8s.go 576: Cleaning up netns ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.370 [INFO][5698] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" iface="eth0" netns="" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.370 [INFO][5698] k8s.go 583: Releasing IP address(es) ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.370 [INFO][5698] utils.go 196: Calico CNI releasing IP address ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.389 [INFO][5714] ipam_plugin.go 416: Releasing address using handleID ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:27.400258 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.400258 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.396 [WARNING][5714] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.396 [INFO][5714] ipam_plugin.go 444: Releasing address using workloadID ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" HandleID="k8s-pod-network.40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-csi--node--driver--f2jvq-eth0" Oct 2 19:22:27.400258 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.400258 env[1466]: 2023-10-02 19:22:27.399 [INFO][5698] k8s.go 589: Teardown processing complete. ContainerID="40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34" Oct 2 19:22:27.400887 env[1466]: time="2023-10-02T19:22:27.400284140Z" level=info msg="TearDown network for sandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\" successfully" Oct 2 19:22:27.402520 env[1466]: time="2023-10-02T19:22:27.402418279Z" level=info msg="RemovePodSandbox \"40382b7f13a0712c969e3365861a2b6025d7af3a2a94ebc24deefcd9c6b25e34\" returns successfully" Oct 2 19:22:27.402863 env[1466]: time="2023-10-02T19:22:27.402835024Z" level=info msg="StopPodSandbox for \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\"" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.436 [WARNING][5743] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"7c5feed4-1050-40b0-91f6-e1955c1da4ca", ResourceVersion:"710", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970", Pod:"coredns-565d847f94-fzc52", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie987178ae15", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.436 [INFO][5743] k8s.go 576: Cleaning up netns ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.437 [INFO][5743] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" iface="eth0" netns="" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.437 [INFO][5743] k8s.go 583: Releasing IP address(es) ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.437 [INFO][5743] utils.go 196: Calico CNI releasing IP address ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.456 [INFO][5759] ipam_plugin.go 416: Releasing address using handleID ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:27.466949 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.466949 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.463 [WARNING][5759] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.463 [INFO][5759] ipam_plugin.go 444: Releasing address using workloadID ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:27.466949 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.466949 env[1466]: 2023-10-02 19:22:27.465 [INFO][5743] k8s.go 589: Teardown processing complete. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.467615 env[1466]: time="2023-10-02T19:22:27.466945041Z" level=info msg="TearDown network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\" successfully" Oct 2 19:22:27.467615 env[1466]: time="2023-10-02T19:22:27.466997502Z" level=info msg="StopPodSandbox for \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\" returns successfully" Oct 2 19:22:27.467615 env[1466]: time="2023-10-02T19:22:27.467425842Z" level=info msg="RemovePodSandbox for \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\"" Oct 2 19:22:27.467615 env[1466]: time="2023-10-02T19:22:27.467457491Z" level=info msg="Forcibly stopping sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\"" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.503 [WARNING][5788] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"7c5feed4-1050-40b0-91f6-e1955c1da4ca", ResourceVersion:"710", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 21, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.0-a-a82eb4d27c", ContainerID:"88037c7f2bf1c55d4d91c06043a27b21b2b32fc7aa801bb3d2569d559245f970", Pod:"coredns-565d847f94-fzc52", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.27.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie987178ae15", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.504 [INFO][5788] k8s.go 576: Cleaning up netns ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.504 [INFO][5788] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" iface="eth0" netns="" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.504 [INFO][5788] k8s.go 583: Releasing IP address(es) ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.504 [INFO][5788] utils.go 196: Calico CNI releasing IP address ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.526 [INFO][5803] ipam_plugin.go 416: Releasing address using handleID ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:27.539408 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:22:27.539408 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.534 [WARNING][5803] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.534 [INFO][5803] ipam_plugin.go 444: Releasing address using workloadID ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" HandleID="k8s-pod-network.c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Workload="ci--3510.3.0--a--a82eb4d27c-k8s-coredns--565d847f94--fzc52-eth0" Oct 2 19:22:27.539408 env[1466]: time="2023-10-02T19:22:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:22:27.539408 env[1466]: 2023-10-02 19:22:27.538 [INFO][5788] k8s.go 589: Teardown processing complete. ContainerID="c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2" Oct 2 19:22:27.540115 env[1466]: time="2023-10-02T19:22:27.539432435Z" level=info msg="TearDown network for sandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\" successfully" Oct 2 19:22:27.541737 env[1466]: time="2023-10-02T19:22:27.541678816Z" level=info msg="RemovePodSandbox \"c83d9944f8539d963953bf3d11f19a1c3bc04e13431eca59d3dec78014c3a0e2\" returns successfully" Oct 2 19:22:27.656000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:27.698338 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:22:27.698460 kernel: audit: type=1400 audit(1696274547.656:1366): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:27.656000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0012b9040 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:27.903343 kernel: audit: type=1300 audit(1696274547.656:1366): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0012b9040 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:27.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:27.903489 kernel: audit: type=1327 audit(1696274547.656:1366): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:27.656000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:28.082213 kernel: audit: type=1400 audit(1696274547.656:1367): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:28.082245 kernel: audit: type=1300 audit(1696274547.656:1367): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0001cbc20 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:27.656000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0001cbc20 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:28.202847 kernel: audit: type=1327 audit(1696274547.656:1367): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:27.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:28.296109 kernel: audit: type=1400 audit(1696274547.656:1368): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:27.656000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:28.386251 kernel: audit: type=1300 audit(1696274547.656:1368): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001110540 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:27.656000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001110540 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:28.506897 kernel: audit: type=1327 audit(1696274547.656:1368): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:27.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:28.690468 kernel: audit: type=1400 audit(1696274547.657:1369): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0012b9080 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:22:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:31.170019 env[1466]: time="2023-10-02T19:22:31.169897963Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:31.414910 env[1466]: time="2023-10-02T19:22:31.414759136Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:31.415897 env[1466]: time="2023-10-02T19:22:31.415745590Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:31.416208 kubelet[2598]: E1002 19:22:31.416157 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:31.417316 kubelet[2598]: E1002 19:22:31.416238 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:31.417316 kubelet[2598]: E1002 19:22:31.416460 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-97h6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-x9wjr_calico-apiserver(82dd054e-36ec-4da3-aa12-071d46f16fc5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:31.417316 kubelet[2598]: E1002 19:22:31.416584 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:22:32.170122 env[1466]: time="2023-10-02T19:22:32.169995878Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:32.416137 env[1466]: time="2023-10-02T19:22:32.415987203Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:32.417347 env[1466]: time="2023-10-02T19:22:32.417193004Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:32.417731 kubelet[2598]: E1002 19:22:32.417652 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:32.417731 kubelet[2598]: E1002 19:22:32.417733 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:32.418613 kubelet[2598]: E1002 19:22:32.417964 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68mp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-86j2m_calico-apiserver(e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:32.418613 kubelet[2598]: E1002 19:22:32.418058 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:22:39.170131 kubelet[2598]: E1002 19:22:39.170061 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:22:46.169931 kubelet[2598]: E1002 19:22:46.169860 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:22:46.169931 kubelet[2598]: E1002 19:22:46.169866 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:22:51.170350 env[1466]: time="2023-10-02T19:22:51.170219207Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:22:51.442227 env[1466]: time="2023-10-02T19:22:51.441942950Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:51.442986 env[1466]: time="2023-10-02T19:22:51.442850786Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:51.443359 kubelet[2598]: E1002 19:22:51.443286 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:51.444154 kubelet[2598]: E1002 19:22:51.443377 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:22:51.444154 kubelet[2598]: E1002 19:22:51.443617 2598 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:51.445432 env[1466]: time="2023-10-02T19:22:51.445360879Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:22:51.696736 env[1466]: time="2023-10-02T19:22:51.696416910Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:51.697735 env[1466]: time="2023-10-02T19:22:51.697579431Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:51.698210 kubelet[2598]: E1002 19:22:51.698111 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:51.698210 kubelet[2598]: E1002 19:22:51.698200 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:22:51.698610 kubelet[2598]: E1002 19:22:51.698402 2598 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:51.698610 kubelet[2598]: E1002 19:22:51.698557 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:22:57.168171 env[1466]: time="2023-10-02T19:22:57.168127929Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:22:57.420381 env[1466]: time="2023-10-02T19:22:57.420101952Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:22:57.421358 env[1466]: time="2023-10-02T19:22:57.421233180Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:22:57.421838 kubelet[2598]: E1002 19:22:57.421752 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:57.421838 kubelet[2598]: E1002 19:22:57.421838 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:22:57.423122 kubelet[2598]: E1002 19:22:57.422064 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-97h6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-x9wjr_calico-apiserver(82dd054e-36ec-4da3-aa12-071d46f16fc5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:22:57.423122 kubelet[2598]: E1002 19:22:57.422157 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:23:00.170884 env[1466]: time="2023-10-02T19:23:00.170743017Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:23:00.425674 env[1466]: time="2023-10-02T19:23:00.425387100Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:00.426668 env[1466]: time="2023-10-02T19:23:00.426569187Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:00.427114 kubelet[2598]: E1002 19:23:00.427031 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:00.427114 kubelet[2598]: E1002 19:23:00.427117 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:00.427984 kubelet[2598]: E1002 19:23:00.427349 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68mp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-86j2m_calico-apiserver(e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:00.427984 kubelet[2598]: E1002 19:23:00.427443 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:23:02.170362 kubelet[2598]: E1002 19:23:02.170292 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:23:11.170013 kubelet[2598]: E1002 19:23:11.169949 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:23:12.169836 kubelet[2598]: E1002 19:23:12.169729 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:23:16.170515 kubelet[2598]: E1002 19:23:16.170435 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:23:22.467000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:22.495007 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:23:22.495068 kernel: audit: type=1400 audit(1696274602.467:1370): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:22.467000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00197fee0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:22.709156 kernel: audit: type=1300 audit(1696274602.467:1370): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00197fee0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:22.709193 kernel: audit: type=1327 audit(1696274602.467:1370): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:22.467000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:22.801764 kernel: audit: type=1400 audit(1696274602.467:1371): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:22.467000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:22.892652 kernel: audit: type=1300 audit(1696274602.467:1371): arch=c000003e syscall=254 success=no exit=-13 a0=11 a1=c00262e750 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:22.467000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=11 a1=c00262e750 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:23.013346 kernel: audit: type=1327 audit(1696274602.467:1371): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:22.467000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:23.167928 kubelet[2598]: E1002 19:23:23.167903 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:23:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c011d9e180 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:23:24.104805 kernel: audit: type=1400 audit(1696274603.912:1372): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:24.104844 kernel: audit: type=1300 audit(1696274603.912:1372): arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c011d9e180 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:23:24.104861 kernel: audit: type=1327 audit(1696274603.912:1372): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:23:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:23:24.199037 kernel: audit: type=1400 audit(1696274603.912:1373): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00d336ce0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:23:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:23:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c015d29ef0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:23:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:23:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c011d9e1e0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:23:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:23:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0103639b0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:23:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:23:23.912000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:23.912000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00d336d40 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:23:23.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:23:26.169970 kubelet[2598]: E1002 19:23:26.169919 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:23:27.168002 kubelet[2598]: E1002 19:23:27.167983 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:23:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:27.685471 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:23:27.685571 kernel: audit: type=1400 audit(1696274607.657:1378): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002091340 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:27.895072 kernel: audit: type=1300 audit(1696274607.657:1378): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002091340 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:27.895138 kernel: audit: type=1327 audit(1696274607.657:1378): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:27.989722 kernel: audit: type=1400 audit(1696274607.657:1379): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:28.079074 kernel: audit: type=1300 audit(1696274607.657:1379): arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c00197ffa0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c00197ffa0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:28.199615 kernel: audit: type=1327 audit(1696274607.657:1379): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:28.292942 kernel: audit: type=1400 audit(1696274607.657:1380): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:28.383707 kernel: audit: type=1300 audit(1696274607.657:1380): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001f08760 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001f08760 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:28.506846 kernel: audit: type=1327 audit(1696274607.657:1380): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:28.602481 kernel: audit: type=1400 audit(1696274607.659:1381): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:27.659000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:27.659000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002496a40 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:23:27.659000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:38.169784 env[1466]: time="2023-10-02T19:23:38.169681286Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:23:38.431416 env[1466]: time="2023-10-02T19:23:38.431132168Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:38.432433 env[1466]: time="2023-10-02T19:23:38.432278044Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:38.432804 kubelet[2598]: E1002 19:23:38.432756 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:38.433641 kubelet[2598]: E1002 19:23:38.432844 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:38.433641 kubelet[2598]: E1002 19:23:38.433081 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-97h6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-x9wjr_calico-apiserver(82dd054e-36ec-4da3-aa12-071d46f16fc5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:38.433641 kubelet[2598]: E1002 19:23:38.433186 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:23:40.170672 env[1466]: time="2023-10-02T19:23:40.170555505Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:23:40.428697 env[1466]: time="2023-10-02T19:23:40.428431087Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:40.429729 env[1466]: time="2023-10-02T19:23:40.429593865Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:40.430120 kubelet[2598]: E1002 19:23:40.430036 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:23:40.430120 kubelet[2598]: E1002 19:23:40.430122 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:23:40.430996 kubelet[2598]: E1002 19:23:40.430319 2598 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:40.432047 env[1466]: time="2023-10-02T19:23:40.431939149Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:23:40.675156 env[1466]: time="2023-10-02T19:23:40.675001129Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:40.676321 env[1466]: time="2023-10-02T19:23:40.676180135Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:40.676759 kubelet[2598]: E1002 19:23:40.676666 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:23:40.676759 kubelet[2598]: E1002 19:23:40.676762 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:23:40.677106 kubelet[2598]: E1002 19:23:40.676956 2598 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:40.677438 kubelet[2598]: E1002 19:23:40.677135 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:23:41.170102 env[1466]: time="2023-10-02T19:23:41.169983843Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:23:41.421100 env[1466]: time="2023-10-02T19:23:41.420866552Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:23:41.422025 env[1466]: time="2023-10-02T19:23:41.421775138Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:23:41.422361 kubelet[2598]: E1002 19:23:41.422313 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:41.422601 kubelet[2598]: E1002 19:23:41.422413 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:23:41.422768 kubelet[2598]: E1002 19:23:41.422704 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68mp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-86j2m_calico-apiserver(e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:23:41.423145 kubelet[2598]: E1002 19:23:41.422819 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:23:53.169944 kubelet[2598]: E1002 19:23:53.169785 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:23:53.171002 kubelet[2598]: E1002 19:23:53.170109 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:23:54.170374 kubelet[2598]: E1002 19:23:54.170281 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:24:06.171182 kubelet[2598]: E1002 19:24:06.171118 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:24:08.169622 kubelet[2598]: E1002 19:24:08.169550 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:24:08.169622 kubelet[2598]: E1002 19:24:08.169570 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:24:21.170338 kubelet[2598]: E1002 19:24:21.170270 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:24:21.171761 kubelet[2598]: E1002 19:24:21.170432 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:24:21.171761 kubelet[2598]: E1002 19:24:21.171396 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:24:22.468000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:22.495471 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:24:22.495521 kernel: audit: type=1400 audit(1696274662.468:1382): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:22.468000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c42450 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:22.707296 kernel: audit: type=1300 audit(1696274662.468:1382): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c42450 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:22.707355 kernel: audit: type=1327 audit(1696274662.468:1382): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:22.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:22.801660 kernel: audit: type=1400 audit(1696274662.468:1383): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:22.468000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:22.891459 kernel: audit: type=1300 audit(1696274662.468:1383): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000e3a000 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:22.468000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000e3a000 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:23.015104 kernel: audit: type=1327 audit(1696274662.468:1383): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:22.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c015531ce0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:24:24.106576 kernel: audit: type=1400 audit(1696274663.913:1384): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:24.106611 kernel: audit: type=1300 audit(1696274663.913:1384): arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c015531ce0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:24:24.106629 kernel: audit: type=1327 audit(1696274663.913:1384): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:24:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:24:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:24.291246 kernel: audit: type=1400 audit(1696274663.913:1385): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0158f56b0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:24:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:24:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c0158f56e0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:24:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:24:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c00b8dc3a0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:24:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:24:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00b8c08a0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:24:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:24:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c0158f5770 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:24:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:24:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:27.685990 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:24:27.686029 kernel: audit: type=1400 audit(1696274667.657:1390): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:27.867144 kernel: audit: type=1400 audit(1696274667.657:1391): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:27.867218 kernel: audit: type=1300 audit(1696274667.657:1390): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000e3a5e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000e3a5e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0010fff00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:28.106369 kernel: audit: type=1300 audit(1696274667.657:1391): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0010fff00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:28.106406 kernel: audit: type=1327 audit(1696274667.657:1390): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:28.199857 kernel: audit: type=1327 audit(1696274667.657:1391): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:28.293168 kernel: audit: type=1400 audit(1696274667.657:1392): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=16 a1=c0012b9080 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:28.505254 kernel: audit: type=1300 audit(1696274667.657:1392): arch=c000003e syscall=254 success=no exit=-13 a0=16 a1=c0012b9080 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:28.505278 kernel: audit: type=1327 audit(1696274667.657:1392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:27.658000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:28.693348 kernel: audit: type=1400 audit(1696274667.658:1393): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:27.658000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000e3a660 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:24:27.658000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:32.170281 kubelet[2598]: E1002 19:24:32.170227 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:24:33.169903 kubelet[2598]: E1002 19:24:33.169792 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:24:34.169310 kubelet[2598]: E1002 19:24:34.169248 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:24:43.171429 kubelet[2598]: E1002 19:24:43.171339 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:24:45.169666 kubelet[2598]: E1002 19:24:45.169600 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:24:47.168265 kubelet[2598]: E1002 19:24:47.168247 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:24:54.171122 kubelet[2598]: E1002 19:24:54.171057 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:24:59.170893 env[1466]: time="2023-10-02T19:24:59.170744805Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:24:59.492002 env[1466]: time="2023-10-02T19:24:59.491692893Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:24:59.492752 env[1466]: time="2023-10-02T19:24:59.492630282Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:24:59.493250 kubelet[2598]: E1002 19:24:59.493159 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:24:59.493250 kubelet[2598]: E1002 19:24:59.493250 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:24:59.494174 kubelet[2598]: E1002 19:24:59.493516 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-97h6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-x9wjr_calico-apiserver(82dd054e-36ec-4da3-aa12-071d46f16fc5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:24:59.494174 kubelet[2598]: E1002 19:24:59.493622 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:25:00.169279 kubelet[2598]: E1002 19:25:00.169187 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:25:05.170851 env[1466]: time="2023-10-02T19:25:05.170732836Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:25:05.392412 env[1466]: time="2023-10-02T19:25:05.392286286Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:05.393264 env[1466]: time="2023-10-02T19:25:05.393121634Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:05.393740 kubelet[2598]: E1002 19:25:05.393651 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:05.393740 kubelet[2598]: E1002 19:25:05.393743 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:05.394633 kubelet[2598]: E1002 19:25:05.393970 2598 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:05.395789 env[1466]: time="2023-10-02T19:25:05.395677013Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:25:05.642682 env[1466]: time="2023-10-02T19:25:05.642520180Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:05.643788 env[1466]: time="2023-10-02T19:25:05.643624154Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:05.644208 kubelet[2598]: E1002 19:25:05.644126 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:05.644208 kubelet[2598]: E1002 19:25:05.644217 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:05.644568 kubelet[2598]: E1002 19:25:05.644414 2598 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:05.644928 kubelet[2598]: E1002 19:25:05.644575 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:25:13.170395 kubelet[2598]: E1002 19:25:13.170334 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:25:14.170370 env[1466]: time="2023-10-02T19:25:14.170278430Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:25:14.422029 env[1466]: time="2023-10-02T19:25:14.421742313Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:14.422843 env[1466]: time="2023-10-02T19:25:14.422742807Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:14.423290 kubelet[2598]: E1002 19:25:14.423195 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:14.423290 kubelet[2598]: E1002 19:25:14.423289 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:14.424523 kubelet[2598]: E1002 19:25:14.423600 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68mp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-86j2m_calico-apiserver(e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:14.424523 kubelet[2598]: E1002 19:25:14.423701 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:25:16.171010 kubelet[2598]: E1002 19:25:16.170900 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:25:22.468000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:22.497012 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:25:22.497111 kernel: audit: type=1400 audit(1696274722.468:1394): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:22.468000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002d8c1a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:22.709930 kernel: audit: type=1300 audit(1696274722.468:1394): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002d8c1a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:22.709964 kernel: audit: type=1327 audit(1696274722.468:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:22.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:22.802702 kernel: audit: type=1400 audit(1696274722.468:1395): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:22.468000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:22.895283 kernel: audit: type=1300 audit(1696274722.468:1395): arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c002889b60 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:22.468000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c002889b60 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:23.018765 kernel: audit: type=1327 audit(1696274722.468:1395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:22.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c008205260 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:25:24.105442 kernel: audit: type=1400 audit(1696274723.913:1396): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:24.105477 kernel: audit: type=1300 audit(1696274723.913:1396): arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c008205260 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:25:24.105506 kernel: audit: type=1327 audit(1696274723.913:1396): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:25:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:25:24.200637 kernel: audit: type=1400 audit(1696274723.913:1397): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c011e41800 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:25:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:25:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c0026e1280 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:25:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:25:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0026e12e0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:25:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:25:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c0036acc30 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:25:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c00cf46810 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:25:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:25:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:25:27.168162 kubelet[2598]: E1002 19:25:27.168146 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:25:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.686711 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:25:27.686755 kernel: audit: type=1400 audit(1696274727.657:1402): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0025b55c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:27.897992 kernel: audit: type=1300 audit(1696274727.657:1402): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0025b55c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:27.898047 kernel: audit: type=1327 audit(1696274727.657:1402): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:28.079855 kernel: audit: type=1400 audit(1696274727.657:1403): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:28.079894 kernel: audit: type=1300 audit(1696274727.657:1403): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c002d8c3e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c002d8c3e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:28.293806 kernel: audit: type=1327 audit(1696274727.657:1403): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:28.293866 kernel: audit: type=1400 audit(1696274727.657:1404): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.657000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.657000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c0029d2a00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:28.504671 kernel: audit: type=1300 audit(1696274727.657:1404): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c0029d2a00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:28.504715 kernel: audit: type=1327 audit(1696274727.657:1404): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:27.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:27.659000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:28.690406 kernel: audit: type=1400 audit(1696274727.659:1405): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.659000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002a45700 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:25:27.659000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:29.169703 kubelet[2598]: E1002 19:25:29.169648 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:25:30.170677 kubelet[2598]: E1002 19:25:30.170583 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:25:38.169836 kubelet[2598]: E1002 19:25:38.169757 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:25:41.169925 kubelet[2598]: E1002 19:25:41.169828 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:25:44.170942 kubelet[2598]: E1002 19:25:44.170874 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:25:45.029724 update_engine[1458]: I1002 19:25:45.029645 1458 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:25:45.029724 update_engine[1458]: I1002 19:25:45.029723 1458 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:25:45.030785 update_engine[1458]: I1002 19:25:45.030426 1458 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:25:45.031304 update_engine[1458]: I1002 19:25:45.031266 1458 omaha_request_params.cc:62] Current group set to lts Oct 2 19:25:45.031602 update_engine[1458]: I1002 19:25:45.031567 1458 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:25:45.031602 update_engine[1458]: I1002 19:25:45.031587 1458 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:25:45.031914 update_engine[1458]: I1002 19:25:45.031617 1458 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:25:45.031914 update_engine[1458]: I1002 19:25:45.031679 1458 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:25:45.031914 update_engine[1458]: I1002 19:25:45.031814 1458 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:25:45.031914 update_engine[1458]: I1002 19:25:45.031831 1458 omaha_request_action.cc:269] Request: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: Oct 2 19:25:45.031914 update_engine[1458]: I1002 19:25:45.031841 1458 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:25:45.033292 locksmithd[1501]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:25:45.034895 update_engine[1458]: I1002 19:25:45.034854 1458 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:25:45.035339 update_engine[1458]: I1002 19:25:45.035300 1458 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:25:46.130439 update_engine[1458]: I1002 19:25:46.130342 1458 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:25:46.131223 update_engine[1458]: I1002 19:25:46.130897 1458 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:25:46.131354 update_engine[1458]: I1002 19:25:46.131295 1458 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:25:46.489591 update_engine[1458]: I1002 19:25:46.489347 1458 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:25:46.492839 update_engine[1458]: I1002 19:25:46.492754 1458 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:25:46.492839 update_engine[1458]: I1002 19:25:46.492786 1458 omaha_request_action.cc:619] Omaha request response: Oct 2 19:25:46.492839 update_engine[1458]: Oct 2 19:25:46.506533 update_engine[1458]: I1002 19:25:46.506428 1458 omaha_request_action.cc:409] No update. Oct 2 19:25:46.506533 update_engine[1458]: I1002 19:25:46.506474 1458 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:25:46.506533 update_engine[1458]: I1002 19:25:46.506500 1458 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:25:46.506533 update_engine[1458]: I1002 19:25:46.506511 1458 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:25:46.506533 update_engine[1458]: I1002 19:25:46.506520 1458 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:25:46.506533 update_engine[1458]: I1002 19:25:46.506527 1458 update_attempter.cc:302] Processing Done. Oct 2 19:25:46.507371 update_engine[1458]: I1002 19:25:46.506556 1458 update_attempter.cc:338] No update. Oct 2 19:25:46.507371 update_engine[1458]: I1002 19:25:46.506577 1458 update_check_scheduler.cc:74] Next update check in 49m50s Oct 2 19:25:46.507686 locksmithd[1501]: LastCheckedTime=1696274746 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:25:49.170218 kubelet[2598]: E1002 19:25:49.170154 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:25:54.169520 kubelet[2598]: E1002 19:25:54.169434 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:25:55.170457 kubelet[2598]: E1002 19:25:55.170404 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:26:01.169883 kubelet[2598]: E1002 19:26:01.169780 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:26:06.170328 kubelet[2598]: E1002 19:26:06.170216 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:26:06.171184 kubelet[2598]: E1002 19:26:06.171070 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:26:16.169734 kubelet[2598]: E1002 19:26:16.169665 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:26:17.168249 kubelet[2598]: E1002 19:26:17.168223 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:26:18.170732 kubelet[2598]: E1002 19:26:18.170663 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:26:22.468000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:22.497280 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:26:22.497374 kernel: audit: type=1400 audit(1696274782.468:1406): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:22.468000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0018f4c30 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:22.710905 kernel: audit: type=1300 audit(1696274782.468:1406): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0018f4c30 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:22.710950 kernel: audit: type=1327 audit(1696274782.468:1406): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:22.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:22.468000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:22.893020 kernel: audit: type=1400 audit(1696274782.468:1407): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:22.893078 kernel: audit: type=1300 audit(1696274782.468:1407): arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c0026a3960 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:22.468000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c0026a3960 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:22.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:23.107016 kernel: audit: type=1327 audit(1696274782.468:1407): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c00d29c440 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:26:24.105685 kernel: audit: type=1400 audit(1696274783.913:1408): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:24.105762 kernel: audit: type=1300 audit(1696274783.913:1408): arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c00d29c440 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:26:24.105797 kernel: audit: type=1327 audit(1696274783.913:1408): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:26:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:26:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:24.288910 kernel: audit: type=1400 audit(1696274783.913:1409): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c002d29040 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:26:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:26:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c0100abce0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:26:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:26:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00f8ccb10 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:26:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:26:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c01078e930 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:26:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:26:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c00f8ccb70 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:26:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:26:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.687903 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:26:27.687969 kernel: audit: type=1400 audit(1696274787.660:1414): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0026a3d00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:27.900424 kernel: audit: type=1300 audit(1696274787.660:1414): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0026a3d00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:27.900481 kernel: audit: type=1327 audit(1696274787.660:1414): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:28.084828 kernel: audit: type=1400 audit(1696274787.660:1415): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:28.084867 kernel: audit: type=1300 audit(1696274787.660:1415): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00069bd80 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00069bd80 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:28.167926 kubelet[2598]: E1002 19:26:28.167888 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:26:28.205505 kernel: audit: type=1327 audit(1696274787.660:1415): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:28.298884 kernel: audit: type=1400 audit(1696274787.660:1416): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:28.389073 kernel: audit: type=1300 audit(1696274787.660:1416): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0026a3d40 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0026a3d40 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:28.510511 kernel: audit: type=1327 audit(1696274787.660:1416): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:28.605829 kernel: audit: type=1400 audit(1696274787.660:1417): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00069bdc0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:26:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:29.170725 kubelet[2598]: E1002 19:26:29.170654 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:26:30.169215 kubelet[2598]: E1002 19:26:30.169134 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:26:41.169823 kubelet[2598]: E1002 19:26:41.169712 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:26:41.170946 kubelet[2598]: E1002 19:26:41.170859 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:26:42.170027 kubelet[2598]: E1002 19:26:42.169933 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:26:52.171009 kubelet[2598]: E1002 19:26:52.170944 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:26:56.169899 kubelet[2598]: E1002 19:26:56.169715 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:26:57.167949 kubelet[2598]: E1002 19:26:57.167930 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:27:07.168003 kubelet[2598]: E1002 19:27:07.167955 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:27:09.170341 kubelet[2598]: E1002 19:27:09.170229 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:27:11.169763 kubelet[2598]: E1002 19:27:11.169662 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:27:20.170036 kubelet[2598]: E1002 19:27:20.169939 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:27:20.170963 kubelet[2598]: E1002 19:27:20.170791 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:27:22.470000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:22.498097 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:27:22.498139 kernel: audit: type=1400 audit(1696274842.470:1418): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:22.470000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8cba0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:22.709347 kernel: audit: type=1300 audit(1696274842.470:1418): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8cba0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:22.709379 kernel: audit: type=1327 audit(1696274842.470:1418): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:22.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:22.801861 kernel: audit: type=1400 audit(1696274842.470:1419): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:22.470000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:22.892987 kernel: audit: type=1300 audit(1696274842.470:1419): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0029a9050 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:22.470000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0029a9050 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:23.014049 kernel: audit: type=1327 audit(1696274842.470:1419): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:22.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:23.168330 kubelet[2598]: E1002 19:27:23.168284 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:27:23.914000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:23.914000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c010d10aa0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:27:24.107092 kernel: audit: type=1400 audit(1696274843.914:1420): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:24.107135 kernel: audit: type=1300 audit(1696274843.914:1420): arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c010d10aa0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:27:24.107153 kernel: audit: type=1327 audit(1696274843.914:1420): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:27:23.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:27:24.201183 kernel: audit: type=1400 audit(1696274843.914:1421): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:23.914000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:23.914000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c005253bf0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:27:23.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:27:23.914000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:23.914000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00d65b1a0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:27:23.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:27:23.914000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:23.914000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c00a676720 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:27:23.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:27:23.914000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:23.914000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0113220c0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:27:23.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:27:23.914000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:23.914000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c005253c50 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:27:23.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:27:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.689261 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:27:27.689332 kernel: audit: type=1400 audit(1696274847.660:1426): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002912a00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:27.900377 kernel: audit: type=1300 audit(1696274847.660:1426): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002912a00 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:27.900416 kernel: audit: type=1327 audit(1696274847.660:1426): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:28.082395 kernel: audit: type=1400 audit(1696274847.660:1427): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:28.082455 kernel: audit: type=1300 audit(1696274847.660:1427): arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c001bf31e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c001bf31e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:28.296379 kernel: audit: type=1327 audit(1696274847.660:1427): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:28.296461 kernel: audit: type=1400 audit(1696274847.660:1428): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fc4960 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:28.507228 kernel: audit: type=1300 audit(1696274847.660:1428): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fc4960 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:28.507280 kernel: audit: type=1327 audit(1696274847.660:1428): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.660000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:28.692032 kernel: audit: type=1400 audit(1696274847.660:1429): avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.660000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=17 a1=c001535e80 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:27:27.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:31.171346 kubelet[2598]: E1002 19:27:31.171281 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:27:34.170107 kubelet[2598]: E1002 19:27:34.170001 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:27:36.169464 kubelet[2598]: E1002 19:27:36.169411 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:27:42.170287 kubelet[2598]: E1002 19:27:42.170215 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:27:45.170934 env[1466]: time="2023-10-02T19:27:45.170803697Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:27:45.401210 env[1466]: time="2023-10-02T19:27:45.401048561Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:27:45.402339 env[1466]: time="2023-10-02T19:27:45.402180854Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:27:45.402732 kubelet[2598]: E1002 19:27:45.402644 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:27:45.402732 kubelet[2598]: E1002 19:27:45.402720 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:27:45.403605 kubelet[2598]: E1002 19:27:45.402970 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-97h6r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-x9wjr_calico-apiserver(82dd054e-36ec-4da3-aa12-071d46f16fc5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:27:45.403605 kubelet[2598]: E1002 19:27:45.403074 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:27:49.170370 kubelet[2598]: E1002 19:27:49.170275 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:27:53.170656 env[1466]: time="2023-10-02T19:27:53.170559545Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:27:53.434272 env[1466]: time="2023-10-02T19:27:53.433990771Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:27:53.435102 env[1466]: time="2023-10-02T19:27:53.434978778Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:27:53.435620 kubelet[2598]: E1002 19:27:53.435527 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:27:53.435620 kubelet[2598]: E1002 19:27:53.435619 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:27:53.436603 kubelet[2598]: E1002 19:27:53.435852 2598 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:27:53.437573 env[1466]: time="2023-10-02T19:27:53.437477090Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:27:53.697323 env[1466]: time="2023-10-02T19:27:53.697042388Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:27:53.698198 env[1466]: time="2023-10-02T19:27:53.698063227Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:27:53.698662 kubelet[2598]: E1002 19:27:53.698568 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:27:53.698662 kubelet[2598]: E1002 19:27:53.698666 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:27:53.699021 kubelet[2598]: E1002 19:27:53.698889 2598 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mddj4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-f2jvq_calico-system(96f74700-0a9b-4c08-af27-e7ef6b1596f5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:27:53.699355 kubelet[2598]: E1002 19:27:53.699048 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:27:57.448923 systemd[1]: Started sshd@7-145.40.90.157:22-139.178.89.65:46730.service. Oct 2 19:27:57.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-145.40.90.157:22-139.178.89.65:46730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:57.476551 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:27:57.476608 kernel: audit: type=1130 audit(1696274877.447:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-145.40.90.157:22-139.178.89.65:46730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:57.618000 audit[8325]: USER_ACCT pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.620449 sshd[8325]: Accepted publickey for core from 139.178.89.65 port 46730 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:27:57.623600 sshd[8325]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:57.631540 systemd-logind[1456]: New session 10 of user core. Oct 2 19:27:57.633440 systemd[1]: Started session-10.scope. Oct 2 19:27:57.621000 audit[8325]: CRED_ACQ pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.723326 sshd[8325]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:57.724627 systemd[1]: sshd@7-145.40.90.157:22-139.178.89.65:46730.service: Deactivated successfully. Oct 2 19:27:57.725078 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:27:57.725392 systemd-logind[1456]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:27:57.726007 systemd-logind[1456]: Removed session 10. Oct 2 19:27:57.802171 kernel: audit: type=1101 audit(1696274877.618:1431): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.802212 kernel: audit: type=1103 audit(1696274877.621:1432): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.802232 kernel: audit: type=1006 audit(1696274877.621:1433): pid=8325 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:27:57.860751 kernel: audit: type=1300 audit(1696274877.621:1433): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc64a33f00 a2=3 a3=0 items=0 ppid=1 pid=8325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:57.621000 audit[8325]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc64a33f00 a2=3 a3=0 items=0 ppid=1 pid=8325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:57.953334 kernel: audit: type=1327 audit(1696274877.621:1433): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:57.621000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:57.984184 kernel: audit: type=1105 audit(1696274877.638:1434): pid=8325 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.638000 audit[8325]: USER_START pid=8325 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:58.079576 kernel: audit: type=1103 audit(1696274877.640:1435): pid=8327 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.640000 audit[8327]: CRED_ACQ pid=8327 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:58.167954 kubelet[2598]: E1002 19:27:58.167941 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:27:57.722000 audit[8325]: USER_END pid=8325 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:58.264358 kernel: audit: type=1106 audit(1696274877.722:1436): pid=8325 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:58.264430 kernel: audit: type=1104 audit(1696274877.722:1437): pid=8325 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.722000 audit[8325]: CRED_DISP pid=8325 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:57.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-145.40.90.157:22-139.178.89.65:46730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:03.170813 env[1466]: time="2023-10-02T19:28:03.170677032Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:28:03.420985 env[1466]: time="2023-10-02T19:28:03.420707951Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:28:03.421712 env[1466]: time="2023-10-02T19:28:03.421568799Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:28:03.422081 kubelet[2598]: E1002 19:28:03.421999 2598 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:28:03.422081 kubelet[2598]: E1002 19:28:03.422087 2598 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:28:03.423004 kubelet[2598]: E1002 19:28:03.422316 2598 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68mp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-66bb99bc75-86j2m_calico-apiserver(e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:28:03.423004 kubelet[2598]: E1002 19:28:03.422421 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:28:07.733359 systemd[1]: Started sshd@8-145.40.90.157:22-139.178.89.65:52542.service. Oct 2 19:28:07.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-145.40.90.157:22-139.178.89.65:52542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:07.760716 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:07.760783 kernel: audit: type=1130 audit(1696274887.732:1439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-145.40.90.157:22-139.178.89.65:52542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:07.871000 audit[8424]: USER_ACCT pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:07.872274 sshd[8424]: Accepted publickey for core from 139.178.89.65 port 52542 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:28:07.873564 sshd[8424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:07.875896 systemd-logind[1456]: New session 11 of user core. Oct 2 19:28:07.876358 systemd[1]: Started session-11.scope. Oct 2 19:28:07.955275 sshd[8424]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:07.956601 systemd[1]: sshd@8-145.40.90.157:22-139.178.89.65:52542.service: Deactivated successfully. Oct 2 19:28:07.957036 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:28:07.957363 systemd-logind[1456]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:28:07.957814 systemd-logind[1456]: Removed session 11. Oct 2 19:28:07.872000 audit[8424]: CRED_ACQ pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:08.053894 kernel: audit: type=1101 audit(1696274887.871:1440): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:08.053941 kernel: audit: type=1103 audit(1696274887.872:1441): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:08.053961 kernel: audit: type=1006 audit(1696274887.872:1442): pid=8424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:28:08.112292 kernel: audit: type=1300 audit(1696274887.872:1442): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff75f01860 a2=3 a3=0 items=0 ppid=1 pid=8424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:07.872000 audit[8424]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff75f01860 a2=3 a3=0 items=0 ppid=1 pid=8424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:08.168364 kubelet[2598]: E1002 19:28:08.168355 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:28:08.204023 kernel: audit: type=1327 audit(1696274887.872:1442): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:07.872000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:08.234561 kernel: audit: type=1105 audit(1696274887.877:1443): pid=8424 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:07.877000 audit[8424]: USER_START pid=8424 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:08.328889 kernel: audit: type=1103 audit(1696274887.878:1444): pid=8426 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:07.878000 audit[8426]: CRED_ACQ pid=8426 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:08.418034 kernel: audit: type=1106 audit(1696274887.955:1445): pid=8424 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:07.955000 audit[8424]: USER_END pid=8424 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:08.513403 kernel: audit: type=1104 audit(1696274887.955:1446): pid=8424 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:07.955000 audit[8424]: CRED_DISP pid=8424 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:07.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-145.40.90.157:22-139.178.89.65:52542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:10.170279 kubelet[2598]: E1002 19:28:10.170211 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:28:17.168104 kubelet[2598]: E1002 19:28:17.168084 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-86j2m" podUID=e64bc7b8-5010-44fc-ab54-26b9ac1ebe2a Oct 2 19:28:17.963377 systemd[1]: Started sshd@9-145.40.90.157:22-139.178.89.65:54036.service. Oct 2 19:28:17.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-145.40.90.157:22-139.178.89.65:54036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:17.990528 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:17.990618 kernel: audit: type=1130 audit(1696274897.962:1448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-145.40.90.157:22-139.178.89.65:54036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:18.102608 sshd[8526]: Accepted publickey for core from 139.178.89.65 port 54036 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:28:18.101000 audit[8526]: USER_ACCT pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.104830 sshd[8526]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:18.107143 systemd-logind[1456]: New session 12 of user core. Oct 2 19:28:18.107674 systemd[1]: Started session-12.scope. Oct 2 19:28:18.186400 sshd[8526]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:18.188208 systemd[1]: sshd@9-145.40.90.157:22-139.178.89.65:54036.service: Deactivated successfully. Oct 2 19:28:18.188555 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:28:18.188941 systemd-logind[1456]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:28:18.189484 systemd[1]: Started sshd@10-145.40.90.157:22-139.178.89.65:54040.service. Oct 2 19:28:18.190043 systemd-logind[1456]: Removed session 12. Oct 2 19:28:18.104000 audit[8526]: CRED_ACQ pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.284361 kernel: audit: type=1101 audit(1696274898.101:1449): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.284434 kernel: audit: type=1103 audit(1696274898.104:1450): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.284457 kernel: audit: type=1006 audit(1696274898.104:1451): pid=8526 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:28:18.104000 audit[8526]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff92d8b4f0 a2=3 a3=0 items=0 ppid=1 pid=8526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:18.365483 sshd[8551]: Accepted publickey for core from 139.178.89.65 port 54040 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:28:18.366810 sshd[8551]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:18.369034 systemd-logind[1456]: New session 13 of user core. Oct 2 19:28:18.369502 systemd[1]: Started session-13.scope. Oct 2 19:28:18.435157 kernel: audit: type=1300 audit(1696274898.104:1451): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff92d8b4f0 a2=3 a3=0 items=0 ppid=1 pid=8526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:18.435268 kernel: audit: type=1327 audit(1696274898.104:1451): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:18.104000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:18.465743 kernel: audit: type=1105 audit(1696274898.108:1452): pid=8526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.108000 audit[8526]: USER_START pid=8526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.568506 kernel: audit: type=1103 audit(1696274898.108:1453): pid=8528 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.108000 audit[8528]: CRED_ACQ pid=8528 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.185000 audit[8526]: USER_END pid=8526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.744943 kernel: audit: type=1106 audit(1696274898.185:1454): pid=8526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.745055 kernel: audit: type=1104 audit(1696274898.185:1455): pid=8526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.185000 audit[8526]: CRED_DISP pid=8526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-145.40.90.157:22-139.178.89.65:54036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:18.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-145.40.90.157:22-139.178.89.65:54040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:18.364000 audit[8551]: USER_ACCT pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.366000 audit[8551]: CRED_ACQ pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.366000 audit[8551]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff98883ae0 a2=3 a3=0 items=0 ppid=1 pid=8551 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:18.366000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:18.369000 audit[8551]: USER_START pid=8551 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.370000 audit[8553]: CRED_ACQ pid=8553 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.903395 sshd[8551]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:18.902000 audit[8551]: USER_END pid=8551 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.902000 audit[8551]: CRED_DISP pid=8551 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.905455 systemd[1]: sshd@10-145.40.90.157:22-139.178.89.65:54040.service: Deactivated successfully. Oct 2 19:28:18.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-145.40.90.157:22-139.178.89.65:54040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:18.905825 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:28:18.906114 systemd-logind[1456]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:28:18.906850 systemd[1]: Started sshd@11-145.40.90.157:22-139.178.89.65:54044.service. Oct 2 19:28:18.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-145.40.90.157:22-139.178.89.65:54044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:18.907201 systemd-logind[1456]: Removed session 13. Oct 2 19:28:18.934000 audit[8617]: USER_ACCT pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.935747 sshd[8617]: Accepted publickey for core from 139.178.89.65 port 54044 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:28:18.934000 audit[8617]: CRED_ACQ pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.934000 audit[8617]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffda7c8930 a2=3 a3=0 items=0 ppid=1 pid=8617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:18.934000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:18.936495 sshd[8617]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:18.938938 systemd-logind[1456]: New session 14 of user core. Oct 2 19:28:18.939368 systemd[1]: Started session-14.scope. Oct 2 19:28:18.940000 audit[8617]: USER_START pid=8617 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:18.940000 audit[8620]: CRED_ACQ pid=8620 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:19.063652 sshd[8617]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:19.062000 audit[8617]: USER_END pid=8617 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:19.063000 audit[8617]: CRED_DISP pid=8617 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:19.065304 systemd[1]: sshd@11-145.40.90.157:22-139.178.89.65:54044.service: Deactivated successfully. Oct 2 19:28:19.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-145.40.90.157:22-139.178.89.65:54044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:19.065817 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:28:19.066234 systemd-logind[1456]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:28:19.066933 systemd-logind[1456]: Removed session 14. Oct 2 19:28:21.170175 kubelet[2598]: E1002 19:28:21.170104 2598 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-66bb99bc75-x9wjr" podUID=82dd054e-36ec-4da3-aa12-071d46f16fc5 Oct 2 19:28:21.171330 kubelet[2598]: E1002 19:28:21.171268 2598 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-f2jvq" podUID=96f74700-0a9b-4c08-af27-e7ef6b1596f5 Oct 2 19:28:22.469000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:22.469000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0025b4620 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:28:22.469000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:22.470000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:22.470000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c001df2150 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:28:22.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:23.942462 kernel: kauditd_printk_skb: 29 callbacks suppressed Oct 2 19:28:23.942525 kernel: audit: type=1400 audit(1696274903.913:1477): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:24.123682 kernel: audit: type=1400 audit(1696274903.913:1478): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:24.123708 kernel: audit: type=1300 audit(1696274903.913:1477): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c014c83cb0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c014c83cb0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:24.221322 kernel: audit: type=1300 audit(1696274903.913:1478): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c01524eb40 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c01524eb40 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:24.411508 kernel: audit: type=1327 audit(1696274903.913:1477): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:24.411540 kernel: audit: type=1327 audit(1696274903.913:1478): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:24.596691 kernel: audit: type=1400 audit(1696274903.913:1479): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:24.596754 kernel: audit: type=1400 audit(1696274903.913:1480): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:24.689235 kernel: audit: type=1300 audit(1696274903.913:1479): arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0153476b0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0153476b0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:24.787380 kernel: audit: type=1327 audit(1696274903.913:1479): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c014c83ce0 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:23.913000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:23.913000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c01503e040 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:23.913000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:23.914000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:23.914000 audit[2427]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c014cd4d60 a2=fc6 a3=0 items=0 ppid=2263 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c68,c882 key=(null) Oct 2 19:28:23.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134352E34302E39302E313537002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:28:27.661000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.661000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001638f80 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:28:27.661000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:27.661000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.661000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00063dd60 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:28:27.661000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:27.661000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.661000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c000133900 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:28:27.661000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:27.662000 audit[2418]: AVC avc: denied { watch } for pid=2418 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.662000 audit[2418]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001638fc0 a2=fc6 a3=0 items=0 ppid=2252 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c722,c954 key=(null) Oct 2 19:28:27.662000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:29.075537 systemd[1]: Started sshd@12-145.40.90.157:22-139.178.89.65:57450.service. Oct 2 19:28:29.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-145.40.90.157:22-139.178.89.65:57450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:29.103224 kernel: kauditd_printk_skb: 20 callbacks suppressed Oct 2 19:28:29.103290 kernel: audit: type=1130 audit(1696274909.075:1487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-145.40.90.157:22-139.178.89.65:57450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:29.215000 audit[8734]: USER_ACCT pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.215947 sshd[8734]: Accepted publickey for core from 139.178.89.65 port 57450 ssh2: RSA SHA256:M4fPbwtaE29dxMxiSyaa1yIvxglYsCEa+0scmSZWaB4 Oct 2 19:28:29.218041 sshd[8734]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:29.220343 systemd-logind[1456]: New session 15 of user core. Oct 2 19:28:29.220979 systemd[1]: Started session-15.scope. Oct 2 19:28:29.299687 sshd[8734]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:29.301554 systemd[1]: sshd@12-145.40.90.157:22-139.178.89.65:57450.service: Deactivated successfully. Oct 2 19:28:29.301994 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:28:29.302307 systemd-logind[1456]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:28:29.302756 systemd-logind[1456]: Removed session 15. Oct 2 19:28:29.217000 audit[8734]: CRED_ACQ pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.398800 kernel: audit: type=1101 audit(1696274909.215:1488): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.398836 kernel: audit: type=1103 audit(1696274909.217:1489): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.398852 kernel: audit: type=1006 audit(1696274909.217:1490): pid=8734 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:28:29.457656 kernel: audit: type=1300 audit(1696274909.217:1490): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc164e1090 a2=3 a3=0 items=0 ppid=1 pid=8734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:29.217000 audit[8734]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc164e1090 a2=3 a3=0 items=0 ppid=1 pid=8734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:29.549885 kernel: audit: type=1327 audit(1696274909.217:1490): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:29.217000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:29.580466 kernel: audit: type=1105 audit(1696274909.222:1491): pid=8734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.222000 audit[8734]: USER_START pid=8734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.675947 kernel: audit: type=1103 audit(1696274909.223:1492): pid=8736 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.223000 audit[8736]: CRED_ACQ pid=8736 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.300000 audit[8734]: USER_END pid=8734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.861958 kernel: audit: type=1106 audit(1696274909.300:1493): pid=8734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.861991 kernel: audit: type=1104 audit(1696274909.300:1494): pid=8734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.300000 audit[8734]: CRED_DISP pid=8734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:29.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-145.40.90.157:22-139.178.89.65:57450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'